OB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:48 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 339.037126][T11348] __nla_validate_parse: 2 callbacks suppressed [ 339.037185][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:11:49 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) 21:11:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:11:49 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:49 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e002030029000505d25a80648c63940d0424fc60100009400a000000053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) sendmsg(r2, &(0x7f0000001500)={&(0x7f00000000c0)=@ll={0x11, 0x2, r8, 0x1, 0x1, 0x6, @local}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000140)="b9327aa9adc3e28717bcd8f5418878b17f09694f5264cb0598f9d33b9161c695f3d0849b49d58701", 0x28}, {&(0x7f0000001200)="91fc1042039602328bcadf76020105b570b2c3b34e91b6323f249bb8aaa8b4d9551b4369c3f87d427dfb154f60b9fa9b2211092e8437983b2ec51500180a21d566aa0529a71cc34b9eb85009460473e54ced0e9f6114a47d7c7ddd89f943aec309bdc0853fff5d7aa19a8c9ba1b7ef2166f5858ea315327279dff7e8d40606d6e211671a11bd726b9b3dcd5cc553004eaf6f511f576704f3f55af76e3bfc4e96d527564a2c464a89967335b1b2251ad910b784a5496a9c083fda0567f1fe3ea088f59db6dca60af6fba495c62c97dd76c8d5923a9ec4981f1a80b84d7273d09ee4e574fdfc7a0ef79bed5aaf4c809f7a45c889cbc5c3a2", 0xf7}, {&(0x7f0000001300)="228dd207f46055a8d346320e2e85df39eddea6cb6f56977c93f7ca7c9115a0720674bf7e4bb517e5dc2889591e831e4bab7c35bdc8a0d659398d9f2cfd8c6e3fb9c8a8e6ccc8868a1bce3c5181ff77e1af6a23513b40d7ea8fbaf43ce2bc53ea0e5c7027214b66a924c4d400fd4631acfe60671777facb62aabcf73caadd6ac81a17237462d5aa7aa1e90b0e5ebac98dc51ab15746b58ce2233714098a11670b0ea4f7eca551e275ee9177ca930b3a9cb7b2039882395559f502afd4b2d43745b9bcb2", 0xc3}, {&(0x7f0000000180)="8cc385e01f228f03d124f578fb80a1d0f4ad9fb5267d07429b2cca167efbd420e24e646a9d76a205db164a688353fb443763280780504a744e53", 0x3a}, {&(0x7f0000001400)="2d12cdec0ca850a898f3f45467e3246e174ca69481b6f58cd929e4f813e6d76352270d24675f7f97d0a8121d25eb1b93e1c3cfa935fc04e2bcd4c731e12d3393f295bee15ed1eb0da9954cdfd20abe61a1b9085ae751b0c10cd61c494d69b1472b48cd3de72d9251f66e6e873260105d76dd92fd295d73558b333c6bcd64a8091bf0cd150fcb6db5747e28d880177bd01d0f85", 0x93}], 0x6}, 0x4000000) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) [ 339.864610][T11361] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 339.873066][T11361] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.984775][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:11:50 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:50 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 340.312904][T11388] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 340.321582][T11388] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 340.330034][T11388] netlink: 178868 bytes leftover after parsing attributes in process `syz-executor.4'. 21:11:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 340.993648][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:11:51 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:51 executing program 4: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000fd94000000000000000000000028d439180af651c4af3fe43ef1154fa61b480f881726b0"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xa5, &(0x7f00000002c0)=""/165, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r0}, 0x10) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000380)=""/137, 0x89}], 0x2, 0x3, 0xbceb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 341.250812][T11414] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 341.259414][T11414] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:11:51 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:51 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:52 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) 21:11:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:11:52 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:52 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x26c1, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="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", 0x12f, 0x400}], 0x3297800, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16]) [ 343.002134][T11448] loop4: detected capacity change from 0 to 19 [ 343.013117][T11447] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 343.021898][T11447] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.129391][T11448] loop4: detected capacity change from 0 to 19 21:11:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000000000000000000000012000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080013"], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x30007, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r1}, 0xade5, 0x5, 0x5}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000070000000c0000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r6, 0x0, 0x4ffe2, 0x0) 21:11:53 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:53 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 343.899985][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.909651][T11487] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 343.925648][T11487] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.934681][T11487] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.943574][T11487] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.952628][T11487] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 21:11:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:11:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:54 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 344.533672][T11492] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 344.542193][T11492] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:11:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f00000001c0)="ffff01", 0x3, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013200)="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", 0x282, 0x11580}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00a5f04e04f984a76abb840afbd14b1c9d747eb8783830798b3da9b1c4d6f3b3b2463ff92e06ccaa2260ac97a6f87f02a949bf1aeb57c613a1c10734d4d03bd526f1d00f80004aca0e98f8504a764c753d6be14656fba04828be4bce054bd4d877a40800b3b9516530846329f00ff69ac2b8aaab872800a4bab0fd5b515f2b3e1886a0b8d42fa44c702d31810af454b770cffa10cbc5a76cd2b050ca5e0cfae90cc15416ad7ffc8afbeaad461e3f84774d1787faed74ee66bc6f023acf1c03000000000000009e1c8022782818e4893f36ecd35300f2"]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x30, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_auto}, {@nfs_export_on}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_gt={'fowner>', 0xee01}}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x404501, 0x8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0xc83a142a93c4d154, r0, 0x97a97000) [ 344.787073][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.312857][T11520] loop4: detected capacity change from 0 to 512 [ 345.430804][T11520] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 345.440667][T11520] EXT4-fs warning (device loop4): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 345.520004][T11520] EXT4-fs (loop4): mount failed [ 345.625676][T11520] loop4: detected capacity change from 0 to 512 [ 345.701562][T11520] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 345.711607][T11520] EXT4-fs warning (device loop4): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 345.814156][T11520] EXT4-fs (loop4): mount failed [ 345.961617][T11473] not chained 10000 origins [ 345.963952][T11473] CPU: 0 PID: 11473 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 345.963952][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.963952][T11473] Call Trace: [ 345.963952][T11473] dump_stack+0x24c/0x2e0 [ 345.963952][T11473] kmsan_internal_chain_origin+0x6f/0x130 [ 345.993901][T11473] ? rawv6_sendmsg+0x4329/0x46b0 [ 345.993901][T11473] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 345.993901][T11473] ? kmsan_get_metadata+0x116/0x180 [ 345.993901][T11473] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 345.993901][T11473] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 346.024976][T11473] ? kmsan_get_metadata+0x116/0x180 [ 346.024976][T11473] ? kmsan_internal_set_origin+0x85/0xc0 [ 346.024976][T11473] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 346.024976][T11473] ? kmsan_unpoison_shadow+0x74/0xa0 [ 346.024976][T11473] ? _copy_from_user+0x1fd/0x300 [ 346.024976][T11473] __msan_chain_origin+0x54/0xa0 [ 346.024976][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.024976][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.024976][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.024976][T11473] ? kmsan_internal_check_memory+0xb5/0x520 [ 346.024976][T11473] ? _copy_to_user+0x1d2/0x270 [ 346.024976][T11473] ? kmsan_get_metadata+0x116/0x180 [ 346.024976][T11473] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 346.024976][T11473] ? kmsan_get_metadata+0x116/0x180 [ 346.024976][T11473] ? kmsan_get_metadata+0x116/0x180 [ 346.024976][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.024976][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.024976][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.024976][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.024976][T11473] do_SYSENTER_32+0x73/0x90 [ 346.024976][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.024976][T11473] RIP: 0023:0xf7fb6549 [ 346.024976][T11473] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 346.160904][T11473] RSP: 002b:00000000f55b05fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 346.160904][T11473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200092c0 [ 346.160904][T11473] RDX: 00000000fffffe9f RSI: 0000000000000000 RDI: 0000000000000000 [ 346.160904][T11473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.160904][T11473] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 346.160904][T11473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.160904][T11473] Uninit was stored to memory at: [ 346.160904][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.160904][T11473] __msan_chain_origin+0x54/0xa0 [ 346.160904][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.160904][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.235524][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.235524][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.235524][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.235524][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.235524][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.235524][T11473] do_SYSENTER_32+0x73/0x90 [ 346.235524][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.235524][T11473] [ 346.235524][T11473] Uninit was stored to memory at: [ 346.235524][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.235524][T11473] __msan_chain_origin+0x54/0xa0 [ 346.235524][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.295869][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.295869][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.295869][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.295869][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.295869][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.295869][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.295869][T11473] do_SYSENTER_32+0x73/0x90 [ 346.295869][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.295869][T11473] [ 346.295869][T11473] Uninit was stored to memory at: [ 346.295869][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.295869][T11473] __msan_chain_origin+0x54/0xa0 [ 346.353998][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.353998][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.353998][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.353998][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.353998][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.353998][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.353998][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.353998][T11473] do_SYSENTER_32+0x73/0x90 [ 346.353998][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.353998][T11473] [ 346.353998][T11473] Uninit was stored to memory at: [ 346.353998][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.353998][T11473] __msan_chain_origin+0x54/0xa0 [ 346.353998][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.423891][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.423891][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.423891][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.423891][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.423891][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.423891][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.423891][T11473] do_SYSENTER_32+0x73/0x90 [ 346.423891][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.423891][T11473] [ 346.423891][T11473] Uninit was stored to memory at: [ 346.423891][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.423891][T11473] __msan_chain_origin+0x54/0xa0 [ 346.423891][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.423891][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.423891][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.423891][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.423891][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.423891][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.423891][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.423891][T11473] do_SYSENTER_32+0x73/0x90 [ 346.423891][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.423891][T11473] [ 346.423891][T11473] Uninit was stored to memory at: [ 346.423891][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.423891][T11473] __msan_chain_origin+0x54/0xa0 [ 346.548531][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.548531][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.548531][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.563964][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.563964][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.563964][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.563964][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.563964][T11473] do_SYSENTER_32+0x73/0x90 [ 346.563964][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.593906][T11473] [ 346.593906][T11473] Uninit was stored to memory at: [ 346.593906][T11473] kmsan_internal_chain_origin+0xad/0x130 [ 346.593906][T11473] __msan_chain_origin+0x54/0xa0 [ 346.593906][T11473] __get_compat_msghdr+0x6db/0x9d0 [ 346.593906][T11473] get_compat_msghdr+0x108/0x2b0 [ 346.623905][T11473] __sys_sendmmsg+0x79d/0x1010 [ 346.623905][T11473] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 346.623905][T11473] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 346.623905][T11473] __do_fast_syscall_32+0x127/0x180 [ 346.623905][T11473] do_fast_syscall_32+0x6a/0xc0 [ 346.623905][T11473] do_SYSENTER_32+0x73/0x90 [ 346.653974][T11473] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 346.653974][T11473] [ 346.653974][T11473] Local variable ----msg_sys@__sys_sendmmsg created at: [ 346.653974][T11473] __sys_sendmmsg+0xbd/0x1010 [ 346.653974][T11473] __sys_sendmmsg+0xbd/0x1010 21:11:57 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 21:11:57 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:11:57 executing program 4: pipe2$9p(&(0x7f0000000080), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_io_uring_setup(0x3ee1, &(0x7f0000000480), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x3}]}}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x520, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x801) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 347.390741][T11548] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 347.399196][T11548] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.482254][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.634202][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:11:57 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:58 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:58 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) [ 348.070910][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:11:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:11:58 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x30007, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r5, 0x0, 0x800000080004105) [ 348.383090][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.560583][T11597] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 348.571791][T11597] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:11:58 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:11:59 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 349.448707][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:11:59 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:11:59 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 349.904002][T11637] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 349.904071][T11637] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.435863][T11657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:00 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:00 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 350.961989][T11668] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 350.962064][T11668] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:01 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 351.321297][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:01 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) 21:12:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 351.947645][T11700] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 351.947720][T11700] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 21:12:02 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:02 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 352.877174][T11718] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 352.885701][T11718] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.085024][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:03 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:03 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xef, &(0x7f0000000280)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_complete(0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x20000e}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xf3, &(0x7f0000000540)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 353.803012][T11753] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 353.811542][T11753] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.026855][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:04 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_io_uring_setup(0x606, &(0x7f00000001c0)={0x0, 0xa8ac, 0x1, 0x3, 0x248, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x381400, 0x0) splice(r1, &(0x7f0000000100)=0x2, r2, &(0x7f0000000180)=0x3, 0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000002c0)={{0x5, 0x1}, {0x3f, 0x3}, 0x9e, 0x4, 0x4}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 21:12:04 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) 21:12:04 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xef, &(0x7f0000000280)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_complete(0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:04 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 354.906646][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.122305][T11805] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 355.130753][T11805] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:05 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:05 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xef, &(0x7f0000000280)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_complete(0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 356.006731][T11835] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 356.015711][T11835] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:06 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:06 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:06 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_io_uring_setup(0x606, &(0x7f00000001c0)={0x0, 0xa8ac, 0x1, 0x3, 0x248, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x381400, 0x0) splice(r1, &(0x7f0000000100)=0x2, r2, &(0x7f0000000180)=0x3, 0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000002c0)={{0x5, 0x1}, {0x3f, 0x3}, 0x9e, 0x4, 0x4}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 356.768649][T11852] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 356.777042][T11852] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:07 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:08 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:08 executing program 5: r0 = syz_mount_image$zonefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="dabe8c1411458c5763afcec7c2d5840c1aceaa1260218113b45617d40479cac3d9948ee323eef7ac696094296daf0cb26b1ebc6de9cb40f3d0e9dc154f45d8aec29b2623559cc0da2ff548c508bd6e972cf0a29af02eafdd8f1bc9af62df79f6cc7cbeff52867e5e23", 0x69, 0x8}], 0x40000, &(0x7f0000000140)={[{@errors_zone_offline}, {}, {}, {@errors_repair}], [{@subj_role}, {@audit}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x8612}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) sendfile(r0, r1, &(0x7f0000000240)=0xff, 0x0) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000010) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0xfb16, 0x5}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x47}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x48000) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000008c0)='root', &(0x7f0000000900)='./file0\x00', r0) read(r1, &(0x7f0000000940)=""/92, 0x5c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000009c0)=0x8, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, r1, 0xb733b000) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4c050) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x40010, r1, 0x44c1e000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000b00)=0x1f, 0x4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000806}, 0x20000800) dup(r0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000c80)=""/4, &(0x7f0000000cc0)=0x4) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000d00), 0x4c8080, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x128, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x638b6980}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0x128}}, 0x5) 21:12:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:08 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:08 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 358.425092][T11887] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 358.433404][T11887] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:08 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1410, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:08 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:09 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 359.023699][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:12:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:09 executing program 4: r0 = getpid() ptrace$setopts(0x4206, r0, 0x7, 0x0) 21:12:09 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 359.490345][T11919] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 359.498815][T11919] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.629616][T11931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0xd, &(0x7f0000000140), 0x8) 21:12:10 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 360.471389][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.130886][T11961] IPVS: ftp: loaded support on port[0] = 21 [ 362.998330][T11961] chnl_net:caif_netlink_parms(): no params data found [ 363.284745][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.292128][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.302104][T11961] device bridge_slave_0 entered promiscuous mode [ 363.320492][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.328012][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.338192][T11961] device bridge_slave_1 entered promiscuous mode [ 363.385707][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.407201][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.501990][T11961] team0: Port device team_slave_0 added [ 363.536392][T11961] team0: Port device team_slave_1 added [ 363.675923][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.684062][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.712552][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.773010][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.780413][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.807296][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.969584][T11961] device hsr_slave_0 entered promiscuous mode [ 364.014878][T11961] device hsr_slave_1 entered promiscuous mode [ 364.025318][ T8770] Bluetooth: hci5: command 0x0409 tx timeout [ 364.033397][T11961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.041446][T11961] Cannot create hsr debugfs directory [ 364.617504][T11961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.688389][T11961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.739281][T11961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.785572][T11961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.187439][T11961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.231976][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.240909][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.267932][T11961] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.291883][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.301655][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.311982][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.319415][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.385486][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.394848][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.404521][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.413691][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.421097][ T8450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.429992][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.440753][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.451549][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.461826][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.509073][T11961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.519634][T11961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.571494][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.581132][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.591486][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.601991][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.611543][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.621883][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.631440][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.642433][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.657432][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.670555][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.731597][T11961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.832700][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.842888][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.885766][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 365.895074][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.906830][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.915605][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.938398][T11961] device veth0_vlan entered promiscuous mode [ 365.968285][T11961] device veth1_vlan entered promiscuous mode [ 366.017372][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.027244][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.050070][T11961] device veth0_macvtap entered promiscuous mode [ 366.065373][T11961] device veth1_macvtap entered promiscuous mode [ 366.097833][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 366.108764][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.118840][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 366.129810][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.139919][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 366.150610][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.160683][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 366.171407][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.181438][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 366.192068][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.205203][T11961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.212944][T10267] Bluetooth: hci5: command 0x041b tx timeout [ 366.222963][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.232624][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.241908][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.251759][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.262570][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 366.273334][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.284557][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 366.295778][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.305890][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 366.316533][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.326628][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 366.337298][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.351114][T11961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.365056][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.374972][ T8776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.393582][T11961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.402674][T11961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.411779][T11961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.420929][T11961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.710603][T11303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.718597][T11303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.820056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.857029][T11303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.865286][T11303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.873084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:12:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 21:12:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:17 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:17 executing program 4: lstat(&(0x7f00000009c0)='./file0/file0\x00', 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000740)=[{&(0x7f0000000240)='k', 0x1, 0x7f2c}, {&(0x7f0000000300)='\a', 0x1}], 0x0, 0x0) 21:12:17 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:17 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 367.409739][T12228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 367.590453][T12242] loop4: detected capacity change from 0 to 127 21:12:17 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002600)={&(0x7f0000002500), 0xffffffffffffff1f, &(0x7f00000025c0)={&(0x7f0000002580)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 21:12:18 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:18 executing program 5: fsopen(&(0x7f000000bc40)='bpf\x00', 0x0) 21:12:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 368.266239][ T1977] Bluetooth: hci5: command 0x040f tx timeout [ 368.579209][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:18 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:18 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) 21:12:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x401c5820, 0x0) 21:12:19 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:19 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 369.518522][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:20 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:12:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3f, 0x1, 0x0, "7f9ce9cee8250000000000000000ac94a4866c339b0882c8cfba323a91fbab22"}) 21:12:20 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0189436, 0x0) 21:12:20 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:20 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 370.345149][ T1977] Bluetooth: hci5: command 0x0419 tx timeout [ 370.552383][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:20 executing program 5: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="42aaafcace4897acdf69fd41169fa5d50bebabee951f1ab0b6bea2b745679996f3df1db7bea8bb27f3f9dd565d449fde0cf9340b80de07ff11404958f50ec295361789b0f702079ccaeb733f6cb09b1faa851af11ac3cec5bf7fd3701f1a49144796e907b3196d6127585da2ebbd96a9d1d50091940dac89913601b4f771630cbe64eedc24ba609f2a9fc8ba1a541cecedbfd186794b895a4d59d006a381c77d453500e562ff3f2fbc6ed6329469591a5c7fe17b5110d9229a2d11e2ca919972333b860a3f4c4c308e1de50b78b96ab551dc7b8f4ba2927e2e8e4c4ddd8a112483d0c2ec9d", 0xfffffffffffffdbf, 0x0) 21:12:20 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x5421, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) 21:12:21 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:21 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) dup3(r0, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:21 executing program 5: r0 = syz_io_uring_setup(0x107b, &(0x7f0000000140), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x2150, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x80000e, 0x2012, r2, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 371.725906][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1, 0xff}}, 0x10) 21:12:22 executing program 5: syz_mount_image$sysv(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f00000007c0)) 21:12:22 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:22 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2={0xff, 0x8}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) [ 372.937411][T12363] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 372.946022][T12363] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.031426][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:23 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 21:12:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) 21:12:23 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8943, &(0x7f0000000280)={'sit0\x00', 0x0}) 21:12:23 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 373.705035][ T7] Bluetooth: hci0: command 0x0406 tx timeout 21:12:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:24 executing program 0: ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, 0x0) syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) r0 = openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$char_raw_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(r0, 0xac01, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, &(0x7f00000000c0)={0x0, 0x7, 0x0}) 21:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0xd, 0x0, 0x7) [ 374.183095][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:24 executing program 5: syz_open_dev$vim2m(&(0x7f0000000640), 0xffbfffffffbffffd, 0x2) 21:12:24 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 374.566098][T12418] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 374.576403][T12418] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:24 executing program 3: socket(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:25 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='resize=']) 21:12:25 executing program 4: socketpair(0x1, 0x0, 0x966, &(0x7f0000002d00)) 21:12:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 21:12:25 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 375.280445][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 375.448041][T12448] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 375.448041][T12448] 21:12:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 375.602296][T12448] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 375.602296][T12448] 21:12:25 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0x0, 0x9c, @MIDI_NOTEON=@special}) 21:12:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x5460, 0x0) 21:12:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000680)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) [ 375.918544][T12468] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 375.927136][T12468] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:26 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 376.099221][T12479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}) 21:12:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) 21:12:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x3, 0x4) 21:12:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f00000001c0), 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:26 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 376.944371][T12501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.251691][T12516] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 377.260280][T12516] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:27 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140e, 0xe800110798d6a553, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 21:12:27 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000100)={"8cabe61cb5cd9b4438e8f14f8875e731bae1e79d1e9113f62a726d582d7e"}) 21:12:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$read(0xb, r1, 0x0, 0x0) 21:12:27 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f00000001c0), 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 377.982989][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x400448c9, 0x0) [ 378.231642][T12555] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 378.240137][T12555] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:28 executing program 5: keyctl$get_keyring_id(0x0, 0x0, 0x80000003) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)=':[\x00', r0) 21:12:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290d56449a61b4b26d700", "7e2b8382", "e5d7c972fee205f7"}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f0000000100)="f3", 0x1, 0x0, 0x0, 0x0) 21:12:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:28 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:28 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) [ 378.838139][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 378.861254][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:29 executing program 5: r0 = syz_io_uring_setup(0x107b, &(0x7f0000000040), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) syz_io_uring_setup(0x1e56, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 21:12:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f00000001c0), 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:29 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 379.261685][T12592] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 379.441283][T12595] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 379.449765][T12595] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:29 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) [ 379.670517][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 379.766116][T12618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:29 executing program 5: r0 = openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, &(0x7f00000000c0)={0x0, 0x7, 0x0}) 21:12:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:29 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:30 executing program 4: socketpair(0x1d, 0x0, 0x10001, &(0x7f0000000b00)) [ 380.048850][T12626] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:12:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:30 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) [ 380.310743][T12634] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 380.319592][T12634] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:30 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 380.674902][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 21:12:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x99, &(0x7f0000000080)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 380.902877][T12662] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:12:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:31 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:31 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) [ 381.528977][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.564772][T12672] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:12:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x200}, 0x40) 21:12:31 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='resize=0x']) [ 381.573056][T12672] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.680743][T12684] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:12:32 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:32 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:32 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000002700)='ns/ipc\x00') 21:12:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 382.288926][T12703] REISERFS warning (device loop5): super-6507 reiserfs_parse_options: bad value 0x for -oresize [ 382.288926][T12703] 21:12:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x0) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:32 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) [ 382.464477][T12703] REISERFS warning (device loop5): super-6507 reiserfs_parse_options: bad value 0x for -oresize [ 382.464477][T12703] [ 382.676367][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:33 executing program 5: syz_mount_image$qnx4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)) [ 383.120163][T12729] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 383.128720][T12729] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:33 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:33 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:33 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002100)=ANY=[], 0x30) [ 383.620820][T12746] qnx4: no qnx4 filesystem (no root dir). [ 383.683922][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.758832][T12746] qnx4: no qnx4 filesystem (no root dir). [ 383.954204][ T7] Bluetooth: hci1: command 0x0406 tx timeout 21:12:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x40049409, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) 21:12:34 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x0) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:34 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:34 executing program 4: fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) [ 384.502084][T12771] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 384.513134][T12771] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.776422][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:34 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:35 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8936, 0x0) 21:12:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:35 executing program 4: fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) 21:12:35 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x0) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 385.453081][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:35 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000005c0)) 21:12:35 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 385.859675][T12821] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 385.868325][T12821] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:36 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) [ 386.051390][T12833] QAT: Device 0 not found 21:12:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x4020940d, 0x0) [ 386.188803][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x0, 0xff, 0x9}, 0x20) 21:12:36 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0x0, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:36 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) 21:12:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8914, &(0x7f0000000280)={'sit0\x00', 0x0}) [ 386.838887][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:37 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x1407, 0x409}, 0x10}}, 0x0) [ 386.966208][T12866] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 386.974790][T12866] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:37 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 387.014793][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.021231][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 21:12:37 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) 21:12:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0x0, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:37 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f000000a380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) [ 387.782589][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:38 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) 21:12:38 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:38 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0) 21:12:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 388.271399][T12901] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 388.279929][T12901] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.545089][T12921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f000000a380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 21:12:38 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:12:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89b1, &(0x7f0000000280)={'sit0\x00', 0x0}) 21:12:39 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0x0, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:39 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}, 0x20) [ 389.442433][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:39 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 389.656259][T12950] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 389.664674][T12950] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:39 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r0) 21:12:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:40 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:40 executing program 5: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 21:12:40 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:12:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0xff, 0x4}, 0x40) [ 390.369027][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:40 executing program 5: socket(0x22, 0x0, 0x4) 21:12:40 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 390.896997][T12989] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 390.905872][T12989] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:41 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:12:41 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000680)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) [ 391.294681][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:41 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:12:41 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) 21:12:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:41 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:42 executing program 4: r0 = syz_io_uring_setup(0x107b, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x42e0, &(0x7f0000000140)={0x0, 0x0, 0x30, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) [ 391.951832][T13027] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 391.960288][T13027] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:42 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:12:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 392.200825][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:42 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:42 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:42 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40045108, &(0x7f0000000040)=@x={0x94, 0x0, "e0de01f9663b"}) 21:12:42 executing program 5: add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="87d9e78396494cbaf5ba4fb3429f94a47e0fd6101b84215f073a26b89248bbf29d", 0x21, 0xfffffffffffffffb) [ 392.891816][T13062] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 392.900475][T13062] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:43 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:43 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=@abs, 0x6e, 0x0}], 0x1, 0x0) 21:12:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x70, 0x0, &(0x7f0000000140)=0x4) 21:12:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 393.893961][T13095] __nla_validate_parse: 1 callbacks suppressed [ 393.894017][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:44 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x1407, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xb}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) 21:12:44 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 394.257478][T13113] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 394.266012][T13113] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:44 executing program 4: r0 = socket(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 21:12:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000001580)={0x401, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 21:12:44 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x28}}, 0x0) [ 394.668717][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:45 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001400)={'vxcan1\x00'}) 21:12:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) 21:12:45 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:45 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x28}}, 0x0) [ 395.420176][T13152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.490391][T13157] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 395.498900][T13157] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.598616][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:12:45 executing program 4: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) 21:12:45 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:45 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 21:12:46 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x401c5820, &(0x7f00000000c0)=@e={0xff, 0x2, 0x0, 0x0, @generic}) [ 396.256988][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:46 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:46 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f00000000c0)=0x5072e7ac) 21:12:46 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:46 executing program 4: add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000180)="67a3cd4b8910a069fbc3e89b", 0xfffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 21:12:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 396.822795][T13200] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 396.831311][T13200] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.162500][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) 21:12:47 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:47 executing program 4: keyctl$chown(0x2, 0x0, 0xee00, 0x0) keyctl$revoke(0x3, 0x0) keyctl$reject(0x13, 0x0, 0x3, 0x0, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)=':#.&\xf3-\xa6C%/%{-{\x00', 0xfffffffffffffffe) 21:12:47 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:48 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:48 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0300290d0000003a13ac25f3", 0x0, 0x0, 0x6000000000000000, 0x0, 0x1, 0x0, &(0x7f0000000040)="ba"}, 0x48) [ 398.173275][T13249] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 398.181698][T13249] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:48 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0xe, 0x0, 0x0, @generic}) 21:12:48 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:48 executing program 5: syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x9}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 21:12:48 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "9efa620a9c14898b", "0a1a555d81566a270fe9bf3bb290d56449a61b4b26d700", "7e2b8382", "e5d7c972fee205f7"}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 21:12:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:49 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40), 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 399.321452][ T5] Bluetooth: hci2: command 0x0406 tx timeout [ 399.341898][T13282] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 399.350432][T13282] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.484416][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:12:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5411, &(0x7f0000000280)={'sit0\x00', 0x0}) 21:12:49 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:49 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40), 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 400.210201][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:12:50 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:50 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40), 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:50 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 21:12:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl0\x00', @ANYRES32, @ANYBLOB="07000000000000060000040149"]}) [ 400.529199][T13316] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 400.537803][T13316] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:51 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl0\x00', @ANYBLOB="07000000000000060000040149"]}) 21:12:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:51 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000005180)={0x0, 0x0, 0x0}, 0x0) 21:12:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:51 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000b40), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1}}) [ 401.700424][T13357] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 401.711315][T13357] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:51 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x1, 0xf9, &(0x7f0000000100)=""/249, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:12:51 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:52 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1407, 0x409, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 21:12:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x11, &(0x7f00000001c0)=@assoc_value, 0x8) 21:12:52 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xcd3e83, 0x0) [ 402.563171][T13383] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 402.571552][T13383] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:52 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:52 executing program 0: syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x82000, &(0x7f0000001700)) 21:12:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f25d5988"}, 0x0, 0x0, @fd}) 21:12:53 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0046d00, &(0x7f0000000040)=@t={0x81, 0x0, 0x0, 0x0, @generic}) 21:12:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:53 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4) [ 403.728253][T13417] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 403.736695][T13417] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x801c581f, 0x0) 21:12:54 executing program 5: keyctl$chown(0x17, 0x0, 0x0, 0x0) 21:12:54 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:54 executing program 0: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) setns(r0, 0x40000000) 21:12:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:54 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x141402, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f00000000c0)) 21:12:55 executing program 5: r0 = socket(0x2a, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) [ 405.120760][T13452] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 405.129293][T13452] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:55 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:55 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40086602, &(0x7f00000000c0)=@e={0xff, 0x0, 0x0, 0x0, @generic}) 21:12:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000b40), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) 21:12:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 21:12:55 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 21:12:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:56 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:56 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffff8) [ 406.227557][T13485] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 406.235906][T13485] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8931, &(0x7f0000000280)={'sit0\x00', 0x0}) [ 406.617727][T13507] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:56 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000b40), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp}) 21:12:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x0, "873f3e7061a85222e5829f079b43a526ef608903083addd37c362bc0fc62192d"}) 21:12:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:57 executing program 0: r0 = fork() sched_setparam(r0, &(0x7f0000000080)=0xc7a) [ 407.290490][T13520] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 21:12:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:57 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) [ 407.673406][T13527] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 407.681901][T13527] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.906430][T13542] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:58 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x1402, 0x409}, 0x10}}, 0x0) 21:12:58 executing program 4: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='^\'\x00', 0x0) 21:12:58 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 408.451928][T13555] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x4d}}], 0x1, 0x0, 0x0) 21:12:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0205647, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) 21:12:58 executing program 0: r0 = syz_io_uring_setup(0x107b, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) [ 408.942654][T13567] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 408.951257][T13567] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:12:59 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:12:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) [ 409.306865][T13581] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:12:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:12:59 executing program 4: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffc) 21:12:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0x17, &(0x7f0000000140), 0x8) 21:12:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:12:59 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8971, &(0x7f0000000280)={'sit0\x00', 0x0}) [ 410.015967][T13598] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) [ 410.210944][T13602] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 410.219338][T13602] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 21:13:00 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8921, &(0x7f0000000280)={'sit0\x00', 0x0}) 21:13:00 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @a}, 0x48, 0xffffffffffffffff) 21:13:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:01 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000007880), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0x4a393ee6a18da60d, r2}, 0x18) 21:13:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:01 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x2, &(0x7f00000001c0)=@assoc_value, 0x8) 21:13:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4, 0x2, 0x0, "9d0917db96c4ab24321a7f382bcc8c06ff22fec7ea593ede2fd88b8094f67ad1"}) [ 411.420170][T13638] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 411.428813][T13638] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:01 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x3, 0x0, 0x0) 21:13:02 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "11cca534"}}) 21:13:02 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffb) 21:13:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="39000000140081ac10002c000500018701546f080000864777660000bf7363d8075e34a829430e3f9b4799f01267ba018d68faaffe77800fcc", 0x39}], 0x1}, 0x0) 21:13:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:02 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:02 executing program 5: syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x81, 0x3, &(0x7f0000000580)=[{&(0x7f0000000700)="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", 0x1000, 0x47f}, {&(0x7f0000000240)="75bdc2a52246db5e7fb093a5391bf0d9e459e9dc63341c2885e2ee93cd8f6e3d4ce407dd4c7534dac67669400aa7f726a3f7c06badd7", 0x36, 0x6}, {&(0x7f00000004c0)="14172bef2666b39a9a5a1bce5b25915937d7d86a22b728f6343c0319b06da32917f8654c19f21ca7a0a9bc87d3ed2ac500a7666f5d7bfff6d2f844afa3c998faad1617453cf4ab43a62b428a94cd927e97e02bf42b345ebec5799731e548019bba1f24ad52fbe4659b36a1ac4ef5d5eba1aed6b495c32248e6a3c30df9df4fb4c8eb", 0xfffffffffffffdcb, 0x8bfb}], 0x82000, &(0x7f0000001700)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@errors_continue}, {@codepage={'codepage', 0x3d, 'iso8859-1'}}], [{@uid_lt={'uid<', 0xee00}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) 21:13:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x40086602, 0x0) [ 412.784231][T13682] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 412.792504][T13682] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:03 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2081, 0x0) [ 412.911220][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:03 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x401c5820, &(0x7f00000000c0)=@n={0x0, 0x81, @SEQ_NOTEON=@special}) 21:13:03 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ad41ff5b"}}) [ 413.571680][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.681803][T13712] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 413.692383][T13712] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:04 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:04 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x6, 0x0, 0x0, @generic}) [ 414.281586][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:04 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000005180)={0x0, 0x0, 0x0}, 0x3) 21:13:04 executing program 5: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="9087", 0x2, 0xffffffffffffffff) 21:13:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:04 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:05 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) 21:13:05 executing program 0: epoll_create(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0xff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x40) [ 414.991242][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.041275][T13749] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 415.049789][T13749] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:05 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x63408, &(0x7f00000004c0)) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:13:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:05 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x5452, 0x0) 21:13:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8911, &(0x7f0000000280)={'sit0\x00', 0x0}) [ 415.713554][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.920709][T13783] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 415.929198][T13783] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x40) 21:13:06 executing program 4: syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000700)="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", 0x1000, 0x47f}, {&(0x7f0000000240)="75bdc2a52246db5e7fb093a5391bf0d9e459e9dc63341c2885e2ee93cd8f6e3d4ce407dd4c7534dac67669400aa7f726a3f7c06badd7", 0x36, 0x6}, {&(0x7f00000004c0)="14172bef2666b39a9a5a1bce5b25915937d7d86a22b728f6343c0319b06da32917f8654c19f21ca7a0a9bc87d3ed2ac500a7666f5d7bfff6d2f844afa3c998faad1617453cf4ab43a62b428a94cd927e97e02bf42b345ebec5799731e548019bba1f24ad52fbe4659b36a1ac4ef5d5eba1aed6b495c32248e6a3c30df9df4fb4c8eb", 0xfffffffffffffdcb, 0x8bfb}], 0x82000, &(0x7f0000001700)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@errors_continue}, {@codepage={'codepage', 0x3d, 'iso8859-1'}}], [{@uid_lt={'uid<', 0xee00}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) 21:13:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0) [ 416.668820][T13804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:06 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, 0x0, 0x0) 21:13:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x5451, 0x0) [ 417.325849][T13825] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 417.334373][T13825] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.514324][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:07 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:08 executing program 0: r0 = io_uring_setup(0x5624, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x341e00, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1], 0x1) 21:13:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 21:13:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 418.213968][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:08 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000140)) [ 418.276983][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:08 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x40049409, 0x0) [ 418.684535][T13863] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 418.692826][T13863] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:08 executing program 0: add_key(&(0x7f0000001080)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="da", 0x1, 0xfffffffffffffffd) 21:13:08 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x173}, 0x20) [ 418.992832][T13874] encrypted_key: insufficient parameters specified [ 419.010510][T13874] encrypted_key: insufficient parameters specified [ 419.088418][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.170935][T13886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0700000000000006000004014917006400680000a92f90787f00000164"]}) 21:13:09 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x0, &(0x7f0000000540)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:09 executing program 5: syz_mount_image$affs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f0000001680)) 21:13:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:09 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) 21:13:09 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40045108, &(0x7f0000000040)=@t={0x0, 0x0, 0x0, 0x0, @generic}) [ 419.853203][T13900] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:10 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:10 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x28000c80) 21:13:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01082bbd7000ffdbff2521"], 0x60}}, 0x0) 21:13:10 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@map], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 21:13:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x0, &(0x7f0000000540)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:10 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 420.773430][T13931] __nla_validate_parse: 5 callbacks suppressed [ 420.773486][T13931] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 21:13:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x2, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) [ 420.918016][T13934] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 420.926595][T13934] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0285628, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) 21:13:11 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x3, 0x0, 0x0, @generic}) [ 421.176822][T13947] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.276576][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0x5452, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d64b3b3"}}) 21:13:11 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:11 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 21:13:11 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)) 21:13:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x0, &(0x7f0000000540)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 421.887290][T13960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 422.021644][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:12 executing program 5: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='@', 0x1, 0xfffffffffffffffc) 21:13:12 executing program 0: add_key(&(0x7f0000000580)='trusted\x00', 0x0, 0x0, 0x0, 0x0) [ 422.337712][T13980] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 422.346193][T13980] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:12 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffff"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:12 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet(0x2, 0x0, 0x0) request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, r0) 21:13:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 422.792115][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:13 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) 21:13:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @empty}}}) [ 423.031387][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:13 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x30d42) 21:13:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:13 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffff"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 423.422341][T14021] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 423.430728][T14021] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000b40), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffffd, 0x1, 0x4}) 21:13:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 21:13:14 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffff"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:14 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000f40)) [ 424.370137][T14054] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x33, 0x0, 0x0) 21:13:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000240)) 21:13:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:15 executing program 0: socketpair(0x1, 0x0, 0x100, &(0x7f0000000180)) 21:13:15 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff0800"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:15 executing program 5: io_uring_setup(0x3d12, &(0x7f00000003c0)={0x0, 0x0, 0x8}) 21:13:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:15 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) 21:13:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev, @private0, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 425.593946][T14090] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:15 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff0800"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:15 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x8) 21:13:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:16 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff0800"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:16 executing program 0: add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 21:13:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x24, 0x0, 0x0) [ 426.675545][T14129] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 426.683910][T14129] __nla_validate_parse: 5 callbacks suppressed [ 426.683964][T14129] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:16 executing program 0: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140), &(0x7f00000012c0)=ANY=[@ANYBLOB='e'], 0x0, 0x0) 21:13:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:16 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100c1, 0x0) 21:13:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) 21:13:17 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff08000200"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:17 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='l[\x00', 0x0) 21:13:17 executing program 0: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) 21:13:17 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 21:13:17 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff08000200"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:18 executing program 4: add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x65, 0x37, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x65]}, 0x0, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_bprm_creds_from_file\x00') 21:13:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:18 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff08000200"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:18 executing program 0: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, 0x0) 21:13:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) [ 428.719964][T14178] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 428.728378][T14178] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.857086][T14182] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2, 0x1, {0x1, @sdr}}) 21:13:19 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000880)={@local, @mcast1, @mcast2, 0xffff}) 21:13:19 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 429.449999][T14203] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:19 executing program 4: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4) 21:13:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:20 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) [ 429.936883][T14214] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:20 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/139, 0x22000, 0x1000, 0x0, 0x1}, 0x20) [ 430.024870][ T8770] Bluetooth: hci3: command 0x0406 tx timeout 21:13:20 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 430.213375][T14220] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 430.228385][T14219] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 430.237080][T14219] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 21:13:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0), 0x8) 21:13:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) [ 430.805452][ T34] audit: type=1804 audit(1621286000.844:3): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir639738145/syzkaller.7qnMB7/99/cgroup.controllers" dev="sda1" ino=14491 res=1 errno=0 [ 430.883247][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) [ 431.127380][T14247] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:21 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:21 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 21:13:21 executing program 5: add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_bprm_creds_from_file\x00') [ 431.551468][T14253] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 431.560349][T14253] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) [ 431.801860][T14268] __nla_validate_parse: 1 callbacks suppressed [ 431.801918][T14268] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:22 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:22 executing program 0: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) 21:13:22 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x5460, 0x0) [ 432.541095][T14288] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:22 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 432.691606][T14292] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 432.700109][T14292] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000003980)) 21:13:23 executing program 4: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x28e}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000006c0)=@ccm_128={{}, "292d7a4c2b35f010", "49b2de81da64a38fcac3041c0de01c84", "4f9493c8", "4db3e72639eeba9d"}, 0x28) syz_io_uring_setup(0x3e5e, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 433.374969][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:23 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:23 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000001000)) 21:13:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x808c3, 0x0) 21:13:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:24 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 21:13:24 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 434.096971][T14338] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.259790][T14341] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 434.268356][T14341] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:24 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f000000f880)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000f9c0)={r0, 0x0, 0x0}, 0x20) 21:13:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:24 executing program 5: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "1e9c907233a0ed9c67cacc0d70e646a2f9a13a8e347e56ddcd142a63da31ec82872a9eb494dfd0bda94a5a0e61fd61237abb6d526279881ef1a0579ea5a94007"}, 0x48, 0xfffffffffffffffb) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) 21:13:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 21:13:25 executing program 0: socket$inet6(0xa, 0x0, 0xfffffcf2) 21:13:25 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 434.974402][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:25 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) dup2(0xffffffffffffffff, r2) 21:13:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) [ 435.546178][T14382] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 435.611004][T14383] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 435.619495][T14383] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:25 executing program 0: fork() setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @mcast2, 0xffffffe0}, {0xa, 0x0, 0x5, @mcast1}, 0x3e02, [0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x5c) 21:13:25 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:26 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) connect$nfc_raw(r0, &(0x7f0000000200), 0x10) 21:13:26 executing program 0: socketpair(0x23, 0x0, 0x1, &(0x7f0000000180)) [ 436.264348][T14410] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:26 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 436.667879][T14394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 21:13:26 executing program 5: r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) [ 436.803593][T14421] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 436.812191][T14421] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.822704][T14422] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x10, 0x4) 21:13:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) dup2(0xffffffffffffffff, r2) 21:13:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:27 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:27 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x0, 0xfffffffffffffff8) 21:13:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x42, 0x0, 0x0) [ 437.982341][T14456] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 437.990760][T14456] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 437.996334][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4) 21:13:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, 0xe8) 21:13:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:28 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:28 executing program 0: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) [ 438.865696][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.140261][T14500] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 439.149019][T14500] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) dup2(0xffffffffffffffff, r2) 21:13:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="e0", 0x1}], 0x1, &(0x7f0000000480)=[@tclass={{0x14}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x24000000) 21:13:29 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:29 executing program 0: request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) 21:13:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 439.888560][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.956824][T14522] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 439.965254][T14522] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) 21:13:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000001840)={0x5, 0x80, 0x0, 0xfa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x6d9, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) close(r0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r1) 21:13:30 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 440.725641][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:30 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1e287113"}}) 21:13:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079ef", 0x5}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 441.320967][T14568] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 441.329585][T14568] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:31 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) dup2(0xffffffffffffffff, r2) 21:13:31 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:31 executing program 5: bind$xdp(0xffffffffffffffff, 0x0, 0x0) 21:13:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x88) [ 442.087790][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079ef", 0x5}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:32 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x5450, 0x0) 21:13:32 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:32 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 442.599247][T14609] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 442.607973][T14609] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x1b, 0x0, 0x0) [ 442.862955][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:33 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 443.029211][T14628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.416899][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0x10) 21:13:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:33 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 21:13:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079ef", 0x5}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:33 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 444.014897][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.062335][T14655] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 444.070909][T14655] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 444.161175][T14663] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:34 executing program 0: socket$inet(0x2, 0x2, 0x7) 21:13:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth0_to_bond\x00'}) 21:13:34 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400210100000000000000000200", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 444.874246][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:35 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000340)) socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) [ 445.029941][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:35 executing program 0: request_key(&(0x7f00000009c0)='cifs.idmap\x00', &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0) 21:13:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d2", 0x7}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:35 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400210100000000000000000200", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:35 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000ac0), 0xe) 21:13:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) [ 446.069776][T14723] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:36 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001400210100000000000000000200", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:36 executing program 5: syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) 21:13:36 executing program 0: add_key(&(0x7f0000000280)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0x0) 21:13:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d2", 0x7}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:37 executing program 0: socket$inet6(0xa, 0x0, 0xffff0001) [ 447.145045][T14765] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 447.153509][T14765] __nla_validate_parse: 5 callbacks suppressed [ 447.153565][T14765] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8001) 21:13:37 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:37 executing program 0: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) add_key(&(0x7f0000000580)='trusted\x00', 0x0, &(0x7f0000000600)="ca", 0x1, 0x0) [ 447.782406][T14786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:38 executing program 5: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) [ 448.021942][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 21:13:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d2", 0x7}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:38 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:38 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x5421, 0x0) [ 448.428169][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.434865][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 21:13:38 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) [ 448.618956][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.680007][T14809] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 448.688742][T14809] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 448.822299][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 449.271822][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.312067][T14834] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x39, 0x0, 0x0) 21:13:39 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:39 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000014de2108ab12a190eb1e040000010902240001000000000904410017ff5d010009050f1f010000000009058303"], 0x0) 21:13:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220", 0x8}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 449.760749][T14847] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 449.769165][T14847] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.861553][T14854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:40 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:40 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) [ 450.096403][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd 21:13:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 450.353989][ T56] usb 6-1: Using ep0 maxpacket: 8 21:13:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220", 0x8}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 450.475999][ T56] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 450.484644][ T56] usb 6-1: config 0 has no interface number 0 [ 450.490872][ T56] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 450.502262][ T56] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.513856][ T56] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 450.514826][ T5] Bluetooth: hci4: command 0x0406 tx timeout [ 450.523937][ T56] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 21:13:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:40 executing program 0: syz_open_dev$sndctrl(&(0x7f00000005c0), 0x81, 0x0) [ 450.847851][ T56] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 450.857262][ T56] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 450.866508][T14891] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 450.876590][ T56] usb 6-1: Manufacturer: syz [ 451.078608][ T56] usb 6-1: config 0 descriptor?? [ 451.148036][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input8 [ 451.332232][ T56] usb 6-1: USB disconnect, device number 2 [ 451.338444][ C1] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 451.382985][ T56] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 21:13:41 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:41 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:41 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_raw(r0, &(0x7f0000000200)={""/58310}, 0xe400) [ 452.134876][ T8450] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 452.374197][ T8450] usb 6-1: Using ep0 maxpacket: 8 [ 452.495383][ T8450] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 452.506473][ T8450] usb 6-1: config 0 has no interface number 0 [ 452.512701][ T8450] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 452.524462][ T8450] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.535880][ T8450] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 452.546129][ T8450] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 21:13:42 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20000) 21:13:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220", 0x8}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 21:13:42 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:13:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) [ 452.874305][ T8450] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 452.883544][ T8450] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 452.944769][ T8450] usb 6-1: config 0 descriptor?? [ 452.964499][ T8450] usb 6-1: can't set config #0, error -71 [ 453.016703][ T8450] usb 6-1: USB disconnect, device number 3 [ 453.083578][T14957] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 453.092199][T14957] __nla_validate_parse: 7 callbacks suppressed [ 453.092251][T14957] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 453.213209][T14959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.264940][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@local, @mcast2, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400080}) 21:13:43 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:13:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) 21:13:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) [ 454.163398][T14998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, r0) 21:13:44 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 454.218656][T15003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 454.531978][T15008] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 454.540382][T15008] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x49, 0x0, 0x0) 21:13:44 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) [ 454.964164][T15024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.043199][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:45 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:13:45 executing program 5: add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 21:13:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @multicast2}, 0x44, 0x0, 0x0, 0x0, 0x35f}) [ 455.746042][T15045] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 455.754474][T15045] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.861880][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:46 executing program 5: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000200)='\xb2B!N\xba<\x91\xb8\x906-\x04m\x99\x91D\x85 C{\xedI\xff\x01),\xe0\xd3\x7f\'z\xfd\xd0\xae\x91\x04\xb0#Z\xc0E\x7f\xe1Bb\x0f\xd8\x98z\x85\x17o3\'0E\x82\'\xa7\xed\x83Q/\xebp\n\xec\xa2\xb5Z\xaa\xd8\t\x83\xf8\x9d\x9e\xbea-\xac\xeeb\xc3\xbe\xb5\x96\x14\f\x1eM\xb6dAO\xef\xccz\xdc\xd0\x959\xb3\xee,pT\xb5\xe8\xce\xf6\x95L\x0e\x1d\xde\xeb\xa1f\xd3\xa3\x989\xd1\xa8\'+\'xc\x93\x8e\b\xa4\x89\x88\x8a0w\x1d\xb0\x8a\xf7\xaf\xf7iA)U\xafo\xfe\xa4\x820\xc3\x00\xf6\xf1t\x8fxM\'\x81\xe6\xcc\x13\x0fJM\xa1') 21:13:46 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 21:13:46 executing program 0: io_uring_setup(0x3d12, &(0x7f00000003c0)={0x0, 0xdb1a, 0x8}) 21:13:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @private0}, 0x1c) 21:13:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 457.184211][T15098] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:47 executing program 0: socket$inet(0x2, 0xa, 0x3) 21:13:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:47 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 21:13:47 executing program 5: request_key(&(0x7f00000009c0)='cifs.idmap\x00', &(0x7f0000000a00)={'syz', 0x3}, &(0x7f0000000a40)='$#\x00', 0x0) 21:13:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x228981, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 21:13:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:13:48 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 458.071434][T15129] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:48 executing program 0: ioctl$RAW_CHAR_CTRL_GETBIND(0xffffffffffffffff, 0xac01, &(0x7f0000000000)={0x0, 0x7, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) 21:13:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 458.531517][T15147] __nla_validate_parse: 7 callbacks suppressed [ 458.531573][T15147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.598496][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.980064][T15162] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 458.989689][T15162] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:49 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21:13:49 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 21:13:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x38, 0x0, 0x0) 21:13:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 459.489311][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 459.578772][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:49 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 21:13:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x35, 0x0, 0x0) 21:13:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) [ 459.997000][T15194] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 460.005707][T15194] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.443485][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.550406][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, 0x0, 0x0, 0x81800) 21:13:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0xfffffffffffffff8, 0x0) 21:13:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:51 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 21:13:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:51 executing program 5: epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) 21:13:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000e80), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) [ 461.465236][T15237] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 461.473526][T15237] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.637551][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:51 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5], 0x20}}, 0x0) 21:13:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 21:13:51 executing program 0: clone(0x2284200, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="fc2b2d0f7ca0917a369d2fcfea7fb3558c4d652d9ff1b122c9083da86907d305d1cafb5db2dd8c4f66d3f5d480c70ebe7b89067fcb42488e0e796e2bb70b3fff9f679f") 21:13:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:52 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:52 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5], 0x20}}, 0x0) 21:13:52 executing program 5: socketpair(0x11, 0x3, 0x1, &(0x7f00000000c0)) 21:13:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 462.924383][T15281] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:13:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 21:13:53 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5], 0x20}}, 0x0) 21:13:53 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "7f"}]}}, &(0x7f0000000040)=""/152, 0x2a, 0x98, 0x1}, 0x20) 21:13:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:53 executing program 5: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 463.929688][T15316] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 463.938188][T15316] __nla_validate_parse: 5 callbacks suppressed [ 463.938244][T15316] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:54 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) 21:13:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x78) [ 464.389829][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:13:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @local, 0x0, 0x3}) 21:13:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:55 executing program 0: clone(0x94c8ce164a808b54, 0x0, 0x0, 0x0, &(0x7f0000000000)="e6") clone(0x8000080, &(0x7f0000000480)="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", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001480)) 21:13:55 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) 21:13:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:55 executing program 5: socket$inet(0x2, 0x0, 0x80010001) [ 465.260148][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.331321][T15357] IPVS: ftp: loaded support on port[0] = 21 [ 465.434317][T15359] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 465.442601][T15359] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.563468][T15365] IPVS: ftp: loaded support on port[0] = 21 21:13:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:56 executing program 0: clone(0x94c8ce164a808b54, 0x0, 0x0, 0x0, &(0x7f0000000000)="e6") clone(0x8000080, &(0x7f0000000480)="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", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001480)) 21:13:56 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)) 21:13:56 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) [ 466.237754][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 466.291771][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 466.468187][T15434] IPVS: ftp: loaded support on port[0] = 21 21:13:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:56 executing program 5: getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) 21:13:57 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100"], 0x20}}, 0x0) 21:13:57 executing program 0: clone(0x94c8ce164a808b54, 0x0, 0x0, 0x0, &(0x7f0000000000)="e6") clone(0x8000080, &(0x7f0000000480)="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", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001480)) [ 467.112306][T15464] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 467.120711][T15464] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.327773][T15475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.384128][T15482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.527538][T15486] IPVS: ftp: loaded support on port[0] = 21 21:13:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:13:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x4, 0x0, [{0x0, 0x7e61, 0x20}, {}, {0x40000001, 0x57e2578d, 0x1, 0x40}, {0x0, 0x1, 0x2, 0x0, 0x8001}]}) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/246, 0xf6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:13:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:58 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100"], 0x20}}, 0x0) 21:13:58 executing program 0: add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) [ 468.117353][T15517] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 468.125834][T15517] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:13:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:13:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 21:13:59 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100"], 0x20}}, 0x0) 21:13:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:13:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 469.672887][T15561] __nla_validate_parse: 3 callbacks suppressed [ 469.672948][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.778617][T15567] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 469.787530][T15567] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:00 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14"], 0x20}}, 0x0) [ 470.396858][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0}, 0x78) 21:14:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 21:14:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:00 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14"], 0x20}}, 0x0) 21:14:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:00 executing program 4: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) [ 470.925928][T15605] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 470.936706][T15605] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) 21:14:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, "8aa8298d"}, &(0x7f00000002c0)=0x28) [ 471.704256][T15609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x4c, 0x0, 0x0) 21:14:02 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac14"], 0x20}}, 0x0) 21:14:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:02 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x0, "59bfee17b1be2f59890abcf0b00add13d0c64507b69f95ddebeda3a550bdb3f87f18d4f877e9285cd9786489b124be889ebe235ac0fd70b5c466d604eebd6ecb"}, 0x48, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) 21:14:02 executing program 0: pselect6(0x40, &(0x7f0000000240)={0x7fff}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) [ 472.463989][T15658] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 472.474899][T15658] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 472.634778][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:02 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac1414"], 0x20}}, 0x0) 21:14:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:03 executing program 5: add_key(&(0x7f0000000100)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 21:14:03 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x210001, 0x0) [ 473.259379][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:03 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac1414"], 0x20}}, 0x0) 21:14:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:03 executing program 5: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@commit}]}) 21:14:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) [ 473.953975][T15706] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 473.962458][T15706] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.129651][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 474.173343][T15721] gfs2: commit mount option requires a positive numeric argument 21:14:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:04 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000100ac1414"], 0x20}}, 0x0) [ 474.299285][T15721] gfs2: commit mount option requires a positive numeric argument 21:14:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:04 executing program 0: socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x3, 0x0) 21:14:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)) 21:14:05 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:05 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 475.160527][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:05 executing program 0: add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, "59bfee17b1be2f59890abcf0b00add13d0c64507b69f95ddebeda3a550bdb3f87f18d4f877e9285cd9786489b124be889ebe235ac0fd70b5c466d604eebd6ecb"}, 0x48, 0xfffffffffffffffe) [ 475.579741][T15764] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 475.588187][T15764] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:05 executing program 5: socket(0x0, 0x336356e7be356742, 0x0) 21:14:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:06 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 476.100730][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x4, 0x0, [{0x0, 0x7e61, 0x20}, {}, {0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}]}) 21:14:06 executing program 5: add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 21:14:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:06 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 476.838152][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:07 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @sdr}) [ 476.900463][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 477.113161][T15826] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 477.121817][T15826] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:07 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:07 executing program 5: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140), &(0x7f00000012c0)=ANY=[], 0x0, 0x0) 21:14:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 477.742640][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 477.795618][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 478.090596][T15864] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 478.101557][T15864] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:08 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) 21:14:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:08 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) 21:14:08 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 479.027714][T15886] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 479.036164][T15886] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:09 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 21:14:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:09 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:09 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) 21:14:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 21:14:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:10 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x3, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}, {0xc0000000, 0x3f, 0x7, 0xffffffff, 0x407}]}) 21:14:10 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x10100) [ 480.530008][T15941] __nla_validate_parse: 4 callbacks suppressed [ 480.530069][T15941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 480.581025][T15944] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 480.589693][T15944] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 480.676643][T15947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:11 executing program 5: io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0x10) socket$inet6(0xa, 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 21:14:11 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 21:14:11 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) mq_open(0x0, 0x40, 0x11, &(0x7f00000001c0)={0xfffffffeffffffff, 0x10000, 0x800}) epoll_create1(0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2, 0x28e}) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0x10) socket$inet6(0xa, 0x800, 0xffff0001) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 481.290691][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.364273][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:11 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 21:14:12 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 21:14:12 executing program 0: clone(0x2284200, 0x0, 0x0, 0x0, 0x0) [ 482.101894][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.190862][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.310545][T16027] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 482.319044][T16027] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:12 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 21:14:13 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_raw(r0, &(0x7f0000000a00)={""/35522}, 0x8c00) [ 482.987989][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.046607][T16057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:13 executing program 0: set_robust_list(&(0x7f0000000040), 0x18) 21:14:13 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:13 executing program 5: socket(0x11, 0xa, 0x9) 21:14:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}]}) [ 483.845079][T16075] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:14:14 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:14 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x4) 21:14:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:14 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 21:14:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}]}) 21:14:14 executing program 0: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x5}, 0x0, 0x0, 0x0) 21:14:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:15 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:15 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x102, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x24080, 0x0) 21:14:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2, 0x1, 0x84, 0x9}]}) [ 485.628502][T16129] __nla_validate_parse: 5 callbacks suppressed [ 485.628564][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000048000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000119500000000000000c9be1704418ce1d4758fa35d17c66884b63e069efb297975738355410c0cec9a66819ce256b8530e31ec24925095a163b9d4e76be266e31a80382240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda459b1fbdce6700003c005e24eaae71ad55721ebd694d1f8898b329477afbda84355dba16971c89c08c07ce144961bfbb975b726a0b59b8c79321bc8d6d2500dd60794bf7cb8ef212f0452eb6415435ab4e6ee740327968dbb729b75a4244ee0f030e5a093bff037d9f7f76aaa845d819fa018d1cb2b0d2ec20bbd14d7b31421046847281aae5b1cc0fd183f68ff1bf9af98bacf1b91cf55debb0c8c027901f949834aec6764bce8586a9470f267b12e5ad2274f22103f30e5c1a119dce8693e7ec53b51f85ff240a93e94b92ae72abe72127d8d23884ea84c82c9d2f5ce635d2b9b82f720095064fcd956de51de721d7f94650e8a343e1d7bd85fec7af84d9b7452cd6016b8b35f4f481f48746950b1a028b68c6e6a79f9101e03b356cf1bb43f75a4e1dbb16880f729f9a89baac5e68c310b9cd4d356cb60c1f8b17db7aff0200000039bf612aaf9e83f6784982e6b51f233e7eda04ff3db4157a5c89b335d1615b9e9edbcb7ce8cf680ecc875c606befac43bf766ffa8a419c89965e5fd397ff4557aa3a0c0f81b285c4eb2faf3c4251be88d75ca1f15a2a3d5ac1ff77a3eefc9ea50664777f3f43a53b66ce6229af0d30e7cccc10ad5939e4d6f6815f91d4a8b1a2122b71e93e21734162d52c264338f71ee2c9f5df407ce3dc7b1ede84795d55dc3403334f0e90617e06928e2193b7e56f0835ae48a89d8f11078747e18cb14cfe282983b80cdd157bace5c341ba15ce628aa2d4c57635e8098e239e09e8a60e819f2b512dbfe49e8180769a85dea624fb31b4fbeac653673e17fe1ccd7aca27f68138021996cef6b7f1df039f6bda1a759986138099822121ea8d5a3a9aa36faa0dc02ddbfdaa342e268a64265b273f16c0c03fb8150fa1f2200550f7c277f4ec58de43aab7e2fc7a2031a62cbcad996e7d213a8642fb1700631e62119be13f4f907d29d2fb8a7f7da14260026cac1cb02cfa80025b9098ed247e423610908c000000000000000000003738ff1295de2e6e0534a44c7453ae32a5d61e9e7bf83f8f3193bdd03bd5cbbdca3315cb4089d8c7f3c44d8658e80d33dd0ab2849cea9d6cd4633f1871a1f74014276b2bb74b02b40cf00ebe4dae1afc146f4bf782069103ea080f708304b65ca42b419f3fcf01b7de410b2d15f2cc3b5ecab844ac87e49253878f7ba25dfaae11fd5f894d676252a18df8a000f140617f833464426de1d09f37f9ac78bc31ce424f7a8740441e2038959e1d790e6dbc99a2771aea976af06a5fd97932f418f104d6878098732e0cc1f3f4d3e9435bf3f85670852c6d1db813be6c4ef1b1f4ccba28537e1564d6c0598b0bbdf4a6f11f864cc5c19e8e1d9a8d2788ec7ca4910c1efd548c2849f19acc1892ee4ebc7a18e10ddc2e3bf20bd1710518b7dde52e9c59ffc4fc3f74c946ce274c94c177e5359a7d0517bbf8681e9bf3e591bc5b6cae446aa0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xffffff88, &(0x7f0000000100)="b9ff0300290d0000003a13ac25f300b3c7d83e1fd9c89800000000000000", 0x0, 0x100, 0x6000000000000000, 0xfffffffffffffe6c, 0x23, &(0x7f0000000140)="e756e296a5b9eab274dd7f9bc5557f9f8076fe3ead19cc80408ec17398341901f604c773bc183d6051cba508d3660b4bb235f537fbafa54dfaaa2f555856667af2cd571daa1212924c9669d121c007c133d75be0018300f3a72bd710579a14a18902069fc62679ae361eb65ab6c923a96304c1b4538035215a9fb1c4ba5cbc61dd4004b3f0985b445479bb370ede59e721525cad2c86459f50646c704d094ea36ad985ac00"/180, &(0x7f0000000040)="bad9c585e5698ca3d9920d2a4d7d14acf3e43314a3abadcd690473a01f8586100a948a541f01616d7715c6bbab1700000000337b6ce3000000000000"}, 0x28) [ 485.696638][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 485.726833][T16130] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 485.735718][T16130] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:16 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc0189436, 0x0) [ 486.344225][ T8776] Bluetooth: hci5: command 0x0406 tx timeout 21:14:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{}]}) [ 486.933032][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.011370][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:17 executing program 5: syz_open_dev$vcsu(&(0x7f0000000a00), 0x1, 0x0) 21:14:17 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:17 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x801c581f, 0x0) 21:14:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{}]}) [ 487.784866][T16192] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 487.793200][T16192] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:18 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000180)=""/94) [ 488.025692][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:18 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010000000000000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{}]}) 21:14:18 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) mq_open(0x0, 0x40, 0x11, &(0x7f00000001c0)={0xfffffffeffffffff, 0x10000, 0x800}) epoll_create1(0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2, 0x28e}) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0x10) socket$inet6(0xa, 0x800, 0xffff0001) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000700)={0x0, 0x42f6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 488.833655][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000049c0)='io\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000300)={0x5, 0x0, [{0x0, 0x7e61, 0x20, 0x5, 0x1f}, {0xa, 0x0, 0x0, 0x84, 0x9}, {0xc0000000, 0x3f, 0x0, 0xffffffff, 0x407}, {0x0, 0x1}, {0x0, 0x0, 0x28997327, 0x2, 0x6}]}) dup2(0xffffffffffffffff, r2) ioctl$KVM_SET_CPUID(r3, 0xae80, 0x0) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/110, 0x6e) 21:14:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:19 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010000000000000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0x0, 0x2, 0x1, 0x84, 0x9}]}) 21:14:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:19 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) epoll_create1(0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x192f, 0x2, 0x2, 0x28e}) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) [ 489.748378][T16250] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 489.756985][T16250] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.031316][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0x0, 0x2, 0x1, 0x84, 0x9}]}) 21:14:20 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010000000000000000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:20 executing program 0: add_key(&(0x7f0000000a80)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 21:14:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:21 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010000000000000000000200", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) [ 491.067604][T16299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.510160][T16312] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 491.521124][T16312] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x3, 0x0, 0x0) 21:14:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0x0, 0x2, 0x1, 0x84, 0x9}]}) 21:14:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000080)) 21:14:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:22 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010000000000000000000200", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 492.471079][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.525966][T16345] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 492.534739][T16345] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x0, 0x1, 0x84, 0x9}]}) 21:14:23 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x4e22, @multicast2}, 0x44, 0x0, 0x0, 0x0, 0x35f}) 21:14:23 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x3c, 0x0, 0x0) 21:14:23 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010000000000000000000200", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x0, 0x1, 0x84, 0x9}]}) [ 493.485162][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:23 executing program 5: syz_open_dev$sndctrl(&(0x7f00000005c0), 0x81, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000b40), 0x4, 0x141300) 21:14:23 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000000000000000020000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x0, 0x1, 0x84, 0x9}]}) 21:14:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000480)) [ 494.054490][T16401] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 494.062808][T16401] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:24 executing program 5: io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2}) 21:14:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 494.668372][T16423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:24 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000000000000000020000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:24 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) 21:14:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2, 0x0, 0x84, 0x9}]}) 21:14:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 495.151845][T16443] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 495.160420][T16443] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) [ 495.614717][T16468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:25 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bridge\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400c8ffffff080002000f"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000000000000000020000", @ANYRES32=r5, @ANYBLOB="08000100ac14149b"], 0x20}}, 0x0) 21:14:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2, 0x0, 0x84, 0x9}]}) 21:14:26 executing program 0: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 21:14:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:26 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) [ 496.486168][T16490] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 496.495691][T16490] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2, 0x0, 0x0, 0x9}]}) [ 496.828638][T16498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0x90) 21:14:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@local}}}, 0xe8) 21:14:27 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 21:14:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{}, {0xa, 0x2}]}) 21:14:27 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000f40)) 21:14:27 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) getsockname$tipc(r0, 0x0, 0x0) 21:14:27 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x40049409, 0x0) [ 497.742024][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xa, 0x2}]}) 21:14:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x7, 0x0, 0x0) 21:14:28 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x300080, 0x0) 21:14:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 498.852560][T16555] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 498.928867][T16557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:29 executing program 2: add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) 21:14:29 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) 21:14:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xa, 0x2}]}) 21:14:29 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000003a40)) [ 499.354946][T16568] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 499.363702][T16568] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x19, 0x0, 0x0) [ 500.201923][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x21c}) 21:14:30 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) 21:14:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2}]}) 21:14:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:30 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x80000001, &(0x7f0000000040)={[0x5]}, 0x8) [ 500.861968][T16616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:14:31 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f00000003c0)) 21:14:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2}]}) [ 501.311794][T16629] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 501.320727][T16629] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.789073][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000140)) 21:14:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0xb, 0x0, 0x0) 21:14:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2}]}) 21:14:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000040)=""/152, 0x26, 0x98, 0x1}, 0x20) 21:14:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 21:14:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) getsockname$tipc(r0, 0x0, &(0x7f0000000b00)) [ 503.142204][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:33 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 503.377363][T16685] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 503.386054][T16685] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:33 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x0) 21:14:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xa}]}) 21:14:33 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) read$char_raw(r0, 0x0, 0x0) 21:14:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:34 executing program 0: fork() setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) [ 504.191773][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:34 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x1f, 0x0, 0x0, &(0x7f0000000f40)) 21:14:34 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 21:14:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xa}]}) [ 504.552668][T16716] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 504.561498][T16716] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.953403][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:35 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) 21:14:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) 21:14:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xa}]}) 21:14:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) 21:14:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 505.784402][T16759] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 505.792698][T16759] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:36 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "1e9c907233a0ed9c67cacc0d70e646a2f9a13a8e347e56ddcd142a63da31ec82872a9eb494dfd0bda94a5a0e61fd61237abb6d526279881ef1a0579ea5a94007"}, 0x48, 0xfffffffffffffffb) 21:14:36 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) 21:14:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev, @private0, @loopback, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, r2}) [ 506.062175][T16775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:14:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, 0x0, 0x0) 21:14:36 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0xa0000c08) 21:14:36 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x121000, 0x0) [ 506.966907][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:37 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) 21:14:37 executing program 5: syz_io_uring_setup(0x3e5e, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 21:14:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x44, 0x0, 0x0, 0x0, 0x35f}) [ 507.520607][T16808] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 507.529217][T16808] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) 21:14:37 executing program 4: mq_open(0x0, 0x0, 0x0, &(0x7f00000001c0)) [ 507.940504][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) 21:14:38 executing program 2: syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) 21:14:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) [ 508.428850][T16835] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 508.437312][T16835] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "5bc5369f54ac581505aa410bdcf22ffc1c527a156e38145842995d0a4e740cfa0d17c803c86a663b2cd04e2441be2bb61b6b96a488b1516946095b937d4992a5", "20e0a9910318a06af535c7df4c5cc01b551aef3c5e2e3d6cf45cabeac57442ed"}) 21:14:38 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) [ 508.940034][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:39 executing program 5: socketpair(0x22, 0x0, 0x5, &(0x7f0000003300)) 21:14:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:39 executing program 2: io_uring_setup(0x4a64, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) 21:14:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:39 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000f9c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 21:14:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 509.605413][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000003700)={@dev, @empty, @loopback}) [ 509.873529][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.880233][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.911539][T16879] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 21:14:40 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) [ 509.920480][T16879] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:40 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000003300)) 21:14:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:40 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 510.639041][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000040)) 21:14:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000028c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x4000) 21:14:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 21:14:41 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x40086602, 0x0) 21:14:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000200)) 21:14:41 executing program 0: socket(0x18, 0x0, 0xffff) 21:14:41 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) connect$nfc_raw(r0, 0x0, 0x0) [ 511.632957][T16921] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 511.641664][T16921] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 511.757564][T16924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, 0x0) 21:14:42 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x9}, 0x0) 21:14:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 21:14:42 executing program 2: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:14:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 512.826859][T16953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:42 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) 21:14:43 executing program 5: add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 21:14:43 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 21:14:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:43 executing program 2: syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) [ 513.487493][T16968] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 513.495867][T16968] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:44 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) socket$inet6(0xa, 0x0, 0x0) 21:14:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x5, 0x0, 0x0) 21:14:44 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1, "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"}, 0xfd1, 0x0) 21:14:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4, 0xffff61de}, 0x1c) [ 514.201865][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:44 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000b40), 0x0, 0x141300) 21:14:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:45 executing program 2: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x151601, 0x0) 21:14:45 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) [ 515.202984][T17009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.399833][T17018] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 515.408342][T17018] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x7fffffff]}) 21:14:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local]}, 0x18) 21:14:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:45 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}, 0x0) [ 516.160663][T17038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:46 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) 21:14:46 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 21:14:46 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380), &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'xxhash64\x00'}}, 0x0, 0x0) 21:14:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 21:14:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 21:14:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x24}, 0x40) 21:14:47 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x20141, 0x0) 21:14:47 executing program 5: add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @desc1}, &(0x7f00000011c0)={0x0, "0ab2f82d798d65c063147a687216412fba4fb9424b34420734298f46fd3ee09de368ba72161d54a6857507158ab00d634ae8485b2c48d256495c37c0385f4eab"}, 0x48, 0xffffffffffffffff) 21:14:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 517.109757][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.160007][T17060] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 517.168599][T17060] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 21:14:47 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000880)='syzkaller\x00', &(0x7f00000008c0)={'syz', 0x1}, 0xfffffffffffffff8) 21:14:47 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@newlinkprop={0x20}, 0x20}}, 0x8010) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)='W', 0x1}], 0x1}, 0x0) 21:14:48 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x40305828, 0x0) 21:14:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xfb}, 0x8) [ 518.325428][T17092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:48 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400141, 0x0) 21:14:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 21:14:48 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 21:14:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 21:14:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', 0x0}) [ 519.036940][T17105] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 519.045483][T17105] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:49 executing program 0: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000013c0), 0x0, 0x0, 0x0) [ 519.340057][T17120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:49 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, 0x0) 21:14:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:14:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 21:14:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x1d, 0x0, "eadd1138b558f7a52105934b045cad34250484f2ce5c0112c9332589b461b0808957443ee5c4f80d6b0c39ab5294a108c38ebab40e3aaec75e869b742ab68bc7ce217c6cd87a0e207bee7021c58c1f5d"}, 0xd8) 21:14:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) 21:14:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 520.257108][T17142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@local, @mcast2, @private1}) 21:14:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x88) [ 520.647486][T17154] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 520.655973][T17154] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) 21:14:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:14:51 executing program 0: syz_io_uring_setup(0x210a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 21:14:51 executing program 4: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x5}, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) [ 521.240394][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:51 executing program 5: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000340)='ceph\x00', 0x0, 0x0, 0x0, r0) 21:14:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:51 executing program 2: socketpair(0x1e, 0x0, 0x8, &(0x7f00000003c0)) 21:14:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21:14:51 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) [ 522.098589][T17187] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 522.107510][T17187] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:52 executing program 4: socketpair(0x11, 0x0, 0x0, &(0x7f00000000c0)) 21:14:52 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) [ 522.327454][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:52 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 21:14:52 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) 21:14:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:14:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x30, 0x0, 0x0) 21:14:53 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x22000, 0x1000, 0x0, 0x1}, 0x20) 21:14:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 523.220395][T17220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:53 executing program 0: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) 21:14:53 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 21:14:53 executing program 5: add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 21:14:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 523.705152][T17233] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 523.713653][T17233] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000039c0)={'icmp6\x00'}, &(0x7f0000003a00)=0x1e) 21:14:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 21:14:54 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x4, 0x0, 0x0) 21:14:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001200), 0xffffffffffffffff) [ 524.611342][T17247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:54 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @desc1}, &(0x7f00000011c0)={0x0, "0ab2f82d798d65c063147a687216412fba4fb9424b34420734298f46fd3ee09de368ba72161d54a6857507158ab00d634ae8485b2c48d256495c37c0385f4eab"}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 21:14:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:55 executing program 0: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) 21:14:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:14:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:14:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) 21:14:55 executing program 4: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0xffffffffffffff4f) [ 525.396304][T17274] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 525.404969][T17274] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f00000001c0)="fa6dcb99", 0x4) 21:14:55 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x1e, 0x0, 0x0) [ 525.802869][T17292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:56 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 21:14:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) 21:14:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:56 executing program 0: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 526.598998][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 21:14:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, 0x0, 0x0) 21:14:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 21:14:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0xdb, 0x2c, &(0x7f0000000180)=""/44, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x8000}, 0x10}, 0x78) 21:14:57 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x40305829, 0x0) [ 527.160493][T17324] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 527.169145][T17324] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x0) 21:14:57 executing program 0: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) 21:14:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @multicast2}, 0x44, 0x0, 0x0, 0x0, 0x35f}) [ 527.634162][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f00000000c0)=0x90) 21:14:58 executing program 2: r0 = epoll_create(0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 21:14:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) 21:14:58 executing program 4: add_key(&(0x7f0000001dc0)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) [ 528.366868][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:58 executing program 5: openat$fb1(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 528.434879][T17362] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 528.443362][T17362] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:58 executing program 0: clone(0x2284200, &(0x7f0000000000), 0x0, &(0x7f0000000140), &(0x7f0000000180)="fc") 21:14:58 executing program 2: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_io_uring_setup(0x3e5e, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 21:14:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:59 executing program 4: mq_open(0x0, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) 21:14:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) [ 529.418810][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:14:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:14:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) 21:14:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:14:59 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "36efca0f3553000d4365587b23ecf4be6770a84680878cd226e1140dc4b04f68baac7d55c877b0453efc4dd10b39b2bcfada5aab2b7223ede8ffc5ae94981aec"}, 0x48, 0xfffffffffffffffd) 21:15:00 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 21:15:00 executing program 0: clone(0x0, &(0x7f0000000000)="d7636d8d3500d1dc59f92ec22f8cdf420898516b4f97573132585331402e24bb8362d3ced2b2a8100f58f6db0ab60c3d2a5a73662f72759d1180e74a402050d77d0c4659e0e12dd4ff5649e4c662cd884880d897b1af0658104baa47cf8cff03f457", 0x0, 0x0, 0x0) [ 530.230072][T17412] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 530.238594][T17412] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 530.423358][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:15:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 21:15:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 21:15:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:15:00 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0xfffffffffffffe03) 21:15:01 executing program 2: clone(0x2284200, &(0x7f0000000000)="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", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="fc2b2d0f7ca0917a369d2fcfea7fb3558c4d652d9ff1b122c9083da86907d305d1cafb5db2dd8c4f66d3f5d480c70ebe7b89067fcb42488e0e796e2bb70b3fff9f679f633ecf733d7f53a5d1be5dff50932c865bda309cf6ea9addc539f8eca2ed5c2275076ae0d83c75f08eaeee51a2de836d2f1b1d8af36efbba973b32aaed24f26a4f58542656e9f7dbf4a39edc79e11bd6bd4889c5f494c0465b0d7df47c5ec2e745b6fe0b6df513b8edeedf") r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) [ 531.214803][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:15:01 executing program 4: request_key(&(0x7f0000000440)='.dead\x00', 0x0, 0x0, 0x0) 21:15:01 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0x1b, &(0x7f0000000140), 0x8) 21:15:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 21:15:01 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) 21:15:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) 21:15:02 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 532.090080][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:15:02 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:02 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x140242, 0x0) 21:15:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 21:15:02 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 21:15:02 executing program 0: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) add_key(&(0x7f0000000580)='trusted\x00', 0x0, &(0x7f0000000600)="ca45ee193e105922e39fae5a35058ecab9f7873c2c95210f28aacebd4d83abe049c7b01e8a3508d8886a0b9193c3048d30caab0575e8f393efabd3759c5e267d9030cef8203e2c458f2a2d70b1896f5cb01a50f07ea38f930e4b1282b726125c1f2b24784b76559afaf67d4bf1f510979dcb6b385fba6a4af61a068fb04f9f9496c382c920d0085c9617200dffe3cd67afa02a31554057b95e81c30d1094fdc4947a77e03cb6eb05150a0f0b34ecd20a839e0e05edeecfc3c027ceb2b8dd79839f", 0xc1, 0x0) 21:15:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/152, 0x1a, 0x98, 0x1}, 0x20) [ 533.019109][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:15:03 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_complete(0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)={{0x103}}, 0x10) 21:15:03 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) 21:15:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 21:15:03 executing program 3: mq_open(&(0x7f0000000180)='+\x00', 0x0, 0x0, &(0x7f00000001c0)) 21:15:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) 21:15:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, 0x0, 0x0) 21:15:04 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x68d80, 0x0) [ 533.884339][ T34] audit: type=1804 audit(1621286103.924:4): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir063130544/syzkaller.7i8DJw/304/cgroup.controllers" dev="sda1" ino=14871 res=1 errno=0 21:15:04 executing program 0: mq_open(&(0x7f0000000280)='/dev/dlm_plock\x00', 0x0, 0x0, 0x0) 21:15:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000180)) 21:15:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x17, 0x0, 0x0) 21:15:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000003700)={@dev, @empty, @loopback, 0x0, 0x2}) 21:15:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x18, 0x0, 0x0) 21:15:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 21:15:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x3a, 0x0, 0x0) 21:15:05 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x105240, 0x0) 21:15:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0x1000, 0x4) 21:15:05 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)) socketpair(0x1, 0x0, 0x100, &(0x7f0000000180)) 21:15:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) 21:15:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)='#..&$\x00') 21:15:05 executing program 5: socket(0x2c, 0x3, 0x8) 21:15:05 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x401c5820, 0x0) 21:15:06 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) 21:15:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:06 executing program 2: syz_io_uring_setup(0x3e5e, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 21:15:06 executing program 4: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='-\x00', 0xfffffffffffffffb) 21:15:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0}}, 0x0) 21:15:06 executing program 3: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='.dead\x00', 0x0) 21:15:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) syz_usbip_server_init(0x0) 21:15:06 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x10, 0x0, 0x0) 21:15:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x2c}}, 0x0) 21:15:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 537.166282][T17573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 21:15:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20050084) 21:15:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) accept4(r0, 0x0, 0x0, 0xf6a79c4b5194d931) 21:15:07 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100), 0x10) 21:15:07 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10940, 0x0) 21:15:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:08 executing program 0: getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000e00)={'HL\x00'}, &(0x7f0000000e40)=0x1e) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x1, "d8"}, &(0x7f0000000040)=0x25) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000e00)={'HL\x00'}, &(0x7f0000000e40)=0x1e) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e22, @broadcast}, 0x21c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth0_to_bond\x00', 0xa0, 0x6, 0x6dc}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 21:15:08 executing program 3: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x8) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 21:15:08 executing program 5: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 21:15:08 executing program 2: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x5}, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x80c}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x7]}, 0x8}) 21:15:08 executing program 4: request_key(&(0x7f00000009c0)='cifs.idmap\x00', 0x0, 0x0, 0x0) [ 538.600656][ T34] audit: type=1804 audit(1621286108.643:5): pid=17600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir244277592/syzkaller.NlOO2V/237/bus" dev="sda1" ino=14003 res=1 errno=0 21:15:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 538.787747][ T34] audit: type=1804 audit(1621286108.693:6): pid=17600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir244277592/syzkaller.NlOO2V/237/bus" dev="sda1" ino=14003 res=1 errno=0 21:15:09 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)) 21:15:09 executing program 0: getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000e00)={'HL\x00'}, &(0x7f0000000e40)=0x1e) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x1, "d8"}, &(0x7f0000000040)=0x25) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000e00)={'HL\x00'}, &(0x7f0000000e40)=0x1e) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e22, @broadcast}, 0x21c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth0_to_bond\x00', 0xa0, 0x6, 0x6dc}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 21:15:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) dup3(r0, r1, 0x0) 21:15:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth0_to_bond\x00', 0xa0, 0x6, 0x6dc}) 21:15:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 21:15:09 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 21:15:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0301"], 0x10) 21:15:10 executing program 0: socket(0x23, 0x0, 0xfffffa8c) 21:15:10 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 21:15:10 executing program 5: socketpair(0x1f, 0x2, 0x9, &(0x7f0000000f40)) 21:15:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, 0x0, 0x0, 0x0) 21:15:10 executing program 4: syz_open_dev$char_raw(&(0x7f0000000000), 0x0, 0x80040) 21:15:10 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) read$char_raw(r0, &(0x7f0000000200)={""/58310}, 0xe400) 21:15:10 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000880)={@local, @mcast1, @mcast2, 0x0, 0x1}) 21:15:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0307"], 0x10) 21:15:11 executing program 3: getresgid(&(0x7f0000000740), &(0x7f0000000780), 0x0) 21:15:11 executing program 4: pselect6(0x40, &(0x7f0000000240)={0x7fff}, 0x0, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 21:15:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) [ 541.507657][T17666] ===================================================== [ 541.513764][T17666] BUG: KMSAN: uninit-value in radix_tree_lookup+0x40f/0x420 [ 541.513764][T17666] CPU: 0 PID: 17666 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0 [ 541.513764][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.513764][T17666] Call Trace: [ 541.543831][T17666] dump_stack+0x24c/0x2e0 [ 541.543831][T17666] kmsan_report+0xfb/0x1e0 [ 541.543831][T17666] __msan_warning+0x5c/0xa0 [ 541.543831][T17666] radix_tree_lookup+0x40f/0x420 [ 541.543831][T17666] qrtr_endpoint_post+0x14a3/0x1a20 [ 541.543831][T17666] qrtr_tun_write_iter+0x2a6/0x3d0 [ 541.543831][T17666] ? qrtr_tun_read_iter+0x830/0x830 [ 541.543831][T17666] vfs_write+0x1083/0x1b00 [ 541.543831][T17666] ksys_write+0x275/0x500 [ 541.543831][T17666] __se_sys_write+0x92/0xb0 [ 541.543831][T17666] __ia32_sys_write+0x4a/0x70 [ 541.543831][T17666] __do_fast_syscall_32+0x127/0x180 [ 541.543831][T17666] do_fast_syscall_32+0x6a/0xc0 [ 541.543831][T17666] do_SYSENTER_32+0x73/0x90 [ 541.543831][T17666] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.543831][T17666] RIP: 0023:0xf7f7b549 [ 541.543831][T17666] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 541.543831][T17666] RSP: 002b:00000000f55755fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 541.543831][T17666] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 541.543831][T17666] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.543831][T17666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.543831][T17666] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 541.543831][T17666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.543831][T17666] [ 541.543831][T17666] Uninit was created at: [ 541.543831][T17666] kmsan_internal_poison_shadow+0x5c/0xf0 [ 541.543831][T17666] kmsan_slab_alloc+0x8e/0xe0 [ 541.543831][T17666] __kmalloc_node_track_caller+0xa4f/0x1470 [ 541.543831][T17666] __alloc_skb+0x4dd/0xe90 [ 541.543831][T17666] __netdev_alloc_skb+0x45d/0x810 [ 541.543831][T17666] qrtr_endpoint_post+0x18d/0x1a20 [ 541.543831][T17666] qrtr_tun_write_iter+0x2a6/0x3d0 [ 541.543831][T17666] vfs_write+0x1083/0x1b00 [ 541.543831][T17666] ksys_write+0x275/0x500 [ 541.543831][T17666] __se_sys_write+0x92/0xb0 [ 541.543831][T17666] __ia32_sys_write+0x4a/0x70 [ 541.543831][T17666] __do_fast_syscall_32+0x127/0x180 21:15:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) [ 541.543831][T17666] do_fast_syscall_32+0x6a/0xc0 [ 541.543831][T17666] do_SYSENTER_32+0x73/0x90 [ 541.543831][T17666] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 541.543831][T17666] ===================================================== [ 541.543831][T17666] Disabling lock debugging due to kernel taint 21:15:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="030100000000000000"], 0x10) 21:15:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x13, 0x0, 0x0) 21:15:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x14, 0x0, 0x0) [ 542.224839][T17672] ===================================================== [ 542.231804][T17672] BUG: KMSAN: uninit-value in radix_tree_lookup+0x40f/0x420 [ 542.233919][T17672] CPU: 0 PID: 17672 Comm: syz-executor.5 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 542.233919][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.233919][T17672] Call Trace: [ 542.233919][T17672] dump_stack+0x24c/0x2e0 [ 542.264125][T17672] kmsan_report+0xfb/0x1e0 [ 542.264125][T17672] __msan_warning+0x5c/0xa0 [ 542.264125][T17672] radix_tree_lookup+0x40f/0x420 [ 542.279427][T17672] qrtr_endpoint_post+0x14a3/0x1a20 [ 542.279427][T17672] qrtr_tun_write_iter+0x2a6/0x3d0 [ 542.279427][T17672] ? qrtr_tun_read_iter+0x830/0x830 [ 542.279427][T17672] vfs_write+0x1083/0x1b00 [ 542.279427][T17672] ksys_write+0x275/0x500 [ 542.279427][T17672] __se_sys_write+0x92/0xb0 [ 542.279427][T17672] __ia32_sys_write+0x4a/0x70 [ 542.279427][T17672] __do_fast_syscall_32+0x127/0x180 [ 542.279427][T17672] do_fast_syscall_32+0x6a/0xc0 [ 542.279427][T17672] do_SYSENTER_32+0x73/0x90 [ 542.279427][T17672] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.279427][T17672] RIP: 0023:0xf7f7b549 [ 542.279427][T17672] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.343941][T17672] RSP: 002b:00000000f55545fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 542.343941][T17672] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 542.343941][T17672] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.384015][T17672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.384015][T17672] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 542.384015][T17672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.408077][T17672] [ 542.408077][T17672] Uninit was created at: [ 542.408077][T17672] kmsan_internal_poison_shadow+0x5c/0xf0 [ 542.408077][T17672] kmsan_slab_alloc+0x8e/0xe0 [ 542.408077][T17672] __kmalloc_node_track_caller+0xa4f/0x1470 [ 542.408077][T17672] __alloc_skb+0x4dd/0xe90 [ 542.408077][T17672] __netdev_alloc_skb+0x45d/0x810 [ 542.408077][T17672] qrtr_endpoint_post+0x18d/0x1a20 [ 542.408077][T17672] qrtr_tun_write_iter+0x2a6/0x3d0 [ 542.408077][T17672] vfs_write+0x1083/0x1b00 [ 542.408077][T17672] ksys_write+0x275/0x500 [ 542.408077][T17672] __se_sys_write+0x92/0xb0 [ 542.408077][T17672] __ia32_sys_write+0x4a/0x70 [ 542.408077][T17672] __do_fast_syscall_32+0x127/0x180 21:15:12 executing program 3: syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) [ 542.408077][T17672] do_fast_syscall_32+0x6a/0xc0 [ 542.408077][T17672] do_SYSENTER_32+0x73/0x90 [ 542.408077][T17672] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 542.408077][T17672] ===================================================== 21:15:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="030100000000000000"], 0x10) 21:15:12 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000b40), 0x0, 0x0) 21:15:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0307"], 0x10) 21:15:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) 21:15:13 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 21:15:13 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$char_raw(r0, &(0x7f0000001a00)={"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"}, 0x1000) 21:15:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) 21:15:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x101) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000006c0)={@private1}) 21:15:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x1, @sdr}}) [ 543.817829][T17703] ===================================================== [ 543.823779][T17703] BUG: KMSAN: uninit-value in radix_tree_lookup+0x40f/0x420 [ 543.823779][T17703] CPU: 0 PID: 17703 Comm: syz-executor.5 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 543.842040][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.842040][T17703] Call Trace: [ 543.842040][T17703] dump_stack+0x24c/0x2e0 [ 543.842040][T17703] kmsan_report+0xfb/0x1e0 [ 543.863935][T17703] __msan_warning+0x5c/0xa0 [ 543.863935][T17703] radix_tree_lookup+0x40f/0x420 [ 543.863935][T17703] qrtr_endpoint_post+0x14a3/0x1a20 [ 543.863935][T17703] qrtr_tun_write_iter+0x2a6/0x3d0 [ 543.863935][T17703] ? qrtr_tun_read_iter+0x830/0x830 [ 543.863935][T17703] vfs_write+0x1083/0x1b00 [ 543.863935][T17703] ksys_write+0x275/0x500 [ 543.863935][T17703] __se_sys_write+0x92/0xb0 [ 543.863935][T17703] __ia32_sys_write+0x4a/0x70 [ 543.863935][T17703] __do_fast_syscall_32+0x127/0x180 [ 543.863935][T17703] do_fast_syscall_32+0x6a/0xc0 [ 543.863935][T17703] do_SYSENTER_32+0x73/0x90 [ 543.863935][T17703] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.863935][T17703] RIP: 0023:0xf7f7b549 [ 543.863935][T17703] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 543.863935][T17703] RSP: 002b:00000000f55755fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 543.863935][T17703] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 543.863935][T17703] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.863935][T17703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.863935][T17703] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 543.863935][T17703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.863935][T17703] [ 543.863935][T17703] Uninit was created at: [ 543.863935][T17703] kmsan_internal_poison_shadow+0x5c/0xf0 [ 543.863935][T17703] kmsan_slab_alloc+0x8e/0xe0 [ 543.863935][T17703] __kmalloc_node_track_caller+0xa4f/0x1470 [ 543.863935][T17703] __alloc_skb+0x4dd/0xe90 [ 543.863935][T17703] __netdev_alloc_skb+0x45d/0x810 [ 543.863935][T17703] qrtr_endpoint_post+0x18d/0x1a20 [ 543.863935][T17703] qrtr_tun_write_iter+0x2a6/0x3d0 [ 543.863935][T17703] vfs_write+0x1083/0x1b00 [ 543.863935][T17703] ksys_write+0x275/0x500 [ 543.863935][T17703] __se_sys_write+0x92/0xb0 [ 543.863935][T17703] __ia32_sys_write+0x4a/0x70 [ 543.863935][T17703] __do_fast_syscall_32+0x127/0x180 [ 543.863935][T17703] do_fast_syscall_32+0x6a/0xc0 [ 543.863935][T17703] do_SYSENTER_32+0x73/0x90 [ 543.863935][T17703] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 543.863935][T17703] ===================================================== 21:15:14 executing program 0: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x5}, &(0x7f00000002c0)={0x2}, &(0x7f0000000300)={0x77359400}, 0x0) 21:15:14 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) 21:15:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[], 0x78) 21:15:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0307"], 0x10) 21:15:15 executing program 0: socket(0x15, 0x5, 0xffff) 21:15:15 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) 21:15:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x4008, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 21:15:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:15 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 21:15:15 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) [ 545.630568][T17733] ===================================================== [ 545.633766][T17733] BUG: KMSAN: uninit-value in radix_tree_lookup+0x40f/0x420 [ 545.633766][T17733] CPU: 1 PID: 17733 Comm: syz-executor.5 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 545.633766][T17733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.633766][T17733] Call Trace: [ 545.633766][T17733] dump_stack+0x24c/0x2e0 [ 545.633766][T17733] kmsan_report+0xfb/0x1e0 [ 545.633766][T17733] __msan_warning+0x5c/0xa0 [ 545.633766][T17733] radix_tree_lookup+0x40f/0x420 [ 545.633766][T17733] qrtr_endpoint_post+0x14a3/0x1a20 [ 545.633766][T17733] qrtr_tun_write_iter+0x2a6/0x3d0 [ 545.633766][T17733] ? qrtr_tun_read_iter+0x830/0x830 [ 545.633766][T17733] vfs_write+0x1083/0x1b00 [ 545.633766][T17733] ksys_write+0x275/0x500 [ 545.633766][T17733] __se_sys_write+0x92/0xb0 [ 545.633766][T17733] __ia32_sys_write+0x4a/0x70 [ 545.633766][T17733] __do_fast_syscall_32+0x127/0x180 [ 545.633766][T17733] do_fast_syscall_32+0x6a/0xc0 [ 545.633766][T17733] do_SYSENTER_32+0x73/0x90 [ 545.633766][T17733] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.633766][T17733] RIP: 0023:0xf7f7b549 [ 545.633766][T17733] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 545.633766][T17733] RSP: 002b:00000000f55755fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 545.633766][T17733] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 545.633766][T17733] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.633766][T17733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.633766][T17733] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 545.633766][T17733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.633766][T17733] [ 545.633766][T17733] Uninit was created at: [ 545.633766][T17733] kmsan_internal_poison_shadow+0x5c/0xf0 [ 545.633766][T17733] kmsan_slab_alloc+0x8e/0xe0 [ 545.633766][T17733] __kmalloc_node_track_caller+0xa4f/0x1470 [ 545.633766][T17733] __alloc_skb+0x4dd/0xe90 [ 545.633766][T17733] __netdev_alloc_skb+0x45d/0x810 [ 545.633766][T17733] qrtr_endpoint_post+0x18d/0x1a20 [ 545.633766][T17733] qrtr_tun_write_iter+0x2a6/0x3d0 [ 545.633766][T17733] vfs_write+0x1083/0x1b00 [ 545.633766][T17733] ksys_write+0x275/0x500 [ 545.633766][T17733] __se_sys_write+0x92/0xb0 [ 545.633766][T17733] __ia32_sys_write+0x4a/0x70 [ 545.633766][T17733] __do_fast_syscall_32+0x127/0x180 [ 545.633766][T17733] do_fast_syscall_32+0x6a/0xc0 [ 545.633766][T17733] do_SYSENTER_32+0x73/0x90 [ 545.633766][T17733] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 545.633766][T17733] ===================================================== 21:15:15 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 21:15:16 executing program 0: request_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0xfffffffffffffffb) 21:15:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) 21:15:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:16 executing program 3: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) mq_open(&(0x7f0000000180)='+\x00', 0x40, 0x0, 0x0) epoll_create1(0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x192f, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0x10) socket$inet6(0xa, 0x800, 0xffff0001) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000680)) syz_io_uring_setup(0x3e5e, &(0x7f0000000700)={0x0, 0x42f6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 21:15:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0307"], 0x10) 21:15:17 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa0000c08) 21:15:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 21:15:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000003a00)) 21:15:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802", 0x17}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x7, 0x9, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x5}, 0x48050, 0x2, 0x0, 0x8, 0x2, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5d3}, r1, 0x9, 0xffffffffffffffff, 0x0) 21:15:17 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$char_raw(r0, 0x0, 0x0) 21:15:17 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) mq_open(&(0x7f0000000180)='+\x00', 0x40, 0x11, &(0x7f00000001c0)={0xfffffffeffffffff, 0x10000, 0x800, 0x1}) epoll_create1(0x0) r0 = io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x192f, 0x2, 0x2, 0x28e}) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0x10) socket$inet6(0xa, 0x800, 0xffff0001) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000680)) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000006c0)=@ccm_128={{0x303}, "292d7a4c2b35f010", "49b2de81da64a38fcac3041c0de01c84", "4f9493c8", "4db3e72639eeba9d"}, 0x28) syz_io_uring_setup(0x3e5e, &(0x7f0000000700)={0x0, 0x42f6, 0x0, 0x0, 0x1b3, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 21:15:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x8, 0x0, 0x0) [ 547.585813][T17767] ===================================================== [ 547.592769][T17767] BUG: KMSAN: uninit-value in radix_tree_lookup+0x40f/0x420 [ 547.593881][T17767] CPU: 0 PID: 17767 Comm: syz-executor.5 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 547.593881][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.593881][T17767] Call Trace: [ 547.593881][T17767] dump_stack+0x24c/0x2e0 [ 547.623871][T17767] kmsan_report+0xfb/0x1e0 [ 547.623871][T17767] __msan_warning+0x5c/0xa0 [ 547.623871][T17767] radix_tree_lookup+0x40f/0x420 [ 547.623871][T17767] qrtr_endpoint_post+0x14a3/0x1a20 [ 547.623871][T17767] qrtr_tun_write_iter+0x2a6/0x3d0 [ 547.623871][T17767] ? qrtr_tun_read_iter+0x830/0x830 [ 547.623871][T17767] vfs_write+0x1083/0x1b00 [ 547.623871][T17767] ksys_write+0x275/0x500 [ 547.623871][T17767] __se_sys_write+0x92/0xb0 [ 547.623871][T17767] __ia32_sys_write+0x4a/0x70 [ 547.623871][T17767] __do_fast_syscall_32+0x127/0x180 [ 547.623871][T17767] do_fast_syscall_32+0x6a/0xc0 [ 547.623871][T17767] do_SYSENTER_32+0x73/0x90 [ 547.623871][T17767] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.623871][T17767] RIP: 0023:0xf7f7b549 [ 547.623871][T17767] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 547.623871][T17767] RSP: 002b:00000000f55755fc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 547.623871][T17767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 547.623871][T17767] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.623871][T17767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.623871][T17767] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 547.623871][T17767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.623871][T17767] [ 547.623871][T17767] Uninit was created at: [ 547.623871][T17767] kmsan_internal_poison_shadow+0x5c/0xf0 [ 547.623871][T17767] kmsan_slab_alloc+0x8e/0xe0 [ 547.623871][T17767] __kmalloc_node_track_caller+0xa4f/0x1470 [ 547.623871][T17767] __alloc_skb+0x4dd/0xe90 [ 547.623871][T17767] __netdev_alloc_skb+0x45d/0x810 [ 547.623871][T17767] qrtr_endpoint_post+0x18d/0x1a20 [ 547.623871][T17767] qrtr_tun_write_iter+0x2a6/0x3d0 [ 547.623871][T17767] vfs_write+0x1083/0x1b00 [ 547.623871][T17767] ksys_write+0x275/0x500 [ 547.623871][T17767] __se_sys_write+0x92/0xb0 [ 547.623871][T17767] __ia32_sys_write+0x4a/0x70 [ 547.623871][T17767] __do_fast_syscall_32+0x127/0x180 [ 547.623871][T17767] do_fast_syscall_32+0x6a/0xc0 [ 547.623871][T17767] do_SYSENTER_32+0x73/0x90 [ 547.623871][T17767] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 547.623871][T17767] ===================================================== 21:15:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802", 0x17}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:18 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) 21:15:18 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000380)=ANY=[]}) 21:15:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0, 0x101}, 0x1c) 21:15:18 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:15:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "8617e6409ba49c2c", "79990899937d1c3c8cdfcc5116c5a737b3f836e1ae981aa75f761160edb05aec", "b58f69ec", "c2938eea56572611"}, 0x38) 21:15:19 executing program 4: clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:15:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802", 0x17}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:19 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101040) 21:15:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 21:15:19 executing program 2: socketpair(0x3, 0x0, 0x1ff, &(0x7f0000000040)) 21:15:19 executing program 0: pkey_alloc(0x0, 0x324b0ebcffe409b3) 21:15:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e", 0x23}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:20 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x2, 0x0) 21:15:20 executing program 3: mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 21:15:20 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x40305839, 0x0) 21:15:20 executing program 2: epoll_create1(0x0) io_uring_setup(0x4a64, &(0x7f0000000340)={0x0, 0x0, 0x2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 21:15:20 executing program 0: io_setup(0xd8a3, &(0x7f0000000000)) io_setup(0x7869, &(0x7f0000000040)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:15:20 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 21:15:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, &(0x7f00000000c0), 0x0, 0x80000) io_setup(0xef, &(0x7f0000000280)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="68e3c079efb9d220b5", 0x9}]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e", 0x23}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_complete(0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) 21:15:20 executing program 3: keyctl$assume_authority(0x10, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) 21:15:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:15:21 executing program 2: add_key$fscrypt_v1(&(0x7f0000001140), 0x0, &(0x7f00000011c0)={0x0, "0ab2f82d798d65c063147a687216412fba4fb9424b34420734298f46fd3ee09de368ba72161d54a6857507158ab00d634ae8485b2c48d256495c37c0385f4eab"}, 0x48, 0xffffffffffffffff) 21:15:21 executing program 0: request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0) 21:15:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x48, 0x0, 0x0) 21:15:21 executing program 4: getresgid(&(0x7f0000000740), 0x0, 0x0)