x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)

16:49:45 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:45 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48)

[ 2881.448438][T28805] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:45 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

16:49:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x0, 0x0, {}, [@typed={0x14, 0x54, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@empty}]}, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:49:45 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfc00000000000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:45 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xfc00}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x0, 0x0, {}, [@typed={0x14, 0x54, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@empty}]}, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2882.163651][T28817] __nla_validate_parse: 6 callbacks suppressed
[ 2882.163718][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:46 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:46 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

[ 2882.273302][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:46 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0)

16:49:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x0, 0x0, {}, [@typed={0x14, 0x54, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@empty}]}, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2882.603611][T28824] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2882.678275][T28826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:47 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xfe80}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000ff03000000000000617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2a6f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4000880)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = dup(r11)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
sendmsg$GTP_CMD_GETPDP(r12, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x4000)

16:49:47 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)

[ 2883.220589][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2883.242120][T28826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfe80ffff00000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:47 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:47 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0)

16:49:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2883.734078][T28848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000ff03000000000000617c39bddeea"], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2a6f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4000880) (async, rerun: 32)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (rerun: 32)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = dup(r11)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async)
sendmsg$GTP_CMD_GETPDP(r12, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x4000)

16:49:48 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xff00}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2884.072806][T28849] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:48 executing program 1:
mq_open(&(0x7f0000000000)='+\x00', 0x0, 0x100, &(0x7f0000000040))

16:49:48 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2884.220107][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2884.288730][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:48 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0)

16:49:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000ff03000000000000617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2a6f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4000880)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
dup(r11) (async)
r12 = dup(r11)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
sendmsg$GTP_CMD_GETPDP(r12, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x4000)

16:49:48 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2884.615142][T28869] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2884.707618][T28873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xffffffff00000000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2885.115144][T28884] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:49 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x100000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2885.210042][T28883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
recvmsg(r4, &(0x7f0000000540)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/130, 0x82}], 0x6, &(0x7f0000001640)=""/202, 0xca}, 0x100)

16:49:49 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:49 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$FUSE_DIRENT(r0, 0x0, 0x98)

16:49:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xffffffffff600000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:49 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

[ 2885.596722][T28894] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:49:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
recvmsg(r4, &(0x7f0000000540)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/130, 0x82}], 0x6, &(0x7f0000001640)=""/202, 0xca}, 0x100)

16:49:50 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2885.889901][T28891] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2886.014388][T28901] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:49:50 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x2)

16:49:50 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:50 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)
write$P9_RUNLINKAT(r0, 0x0, 0x0)

16:49:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async, rerun: 64)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (rerun: 64)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (rerun: 64)
recvmsg(r4, &(0x7f0000000540)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/130, 0x82}], 0x6, &(0x7f0000001640)=""/202, 0xca}, 0x100)

16:49:50 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x800000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2886.519830][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.587898][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.599103][T28912] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2886.618978][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.660308][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.753460][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:49:50 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2886.829651][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.905388][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.914587][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2886.935166][T28913] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:49:51 executing program 1:
pipe(&(0x7f0000000a80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RLERRORu(r0, 0x0, 0x0)

16:49:51 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x58}}, 0x4000040)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r5, @ANYBLOB="db2cd2cb7f6bce288eb3bebd8475f9a59bfd4a816f34cfe36c716f40a7297d4bf5224dc343eab4d8d3982a149cd6e06bae00643e2ee258a8e062e1e6b5c90ae8b4365da526263593417d5839535ec0000000006851811c1afab090e6413f2b73ef562a3a881833350ef1035889416de9b3eb7cdfedc2c336713b462618279e6bb5bcb3b20d260013"], 0x1c}}, 0x0)

[ 2887.234678][T28919] __nla_validate_parse: 5 callbacks suppressed
[ 2887.234748][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2887.316371][T28921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x58}}, 0x4000040)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r5, @ANYBLOB="db2cd2cb7f6bce288eb3bebd8475f9a59bfd4a816f34cfe36c716f40a7297d4bf5224dc343eab4d8d3982a149cd6e06bae00643e2ee258a8e062e1e6b5c90ae8b4365da526263593417d5839535ec0000000006851811c1afab090e6413f2b73ef562a3a881833350ef1035889416de9b3eb7cdfedc2c336713b462618279e6bb5bcb3b20d260013"], 0x1c}}, 0x0)

16:49:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x3)

[ 2887.663933][T28931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:51 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x1000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:51 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

16:49:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x58}}, 0x4000040) (async)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r5, @ANYBLOB="db2cd2cb7f6bce288eb3bebd8475f9a59bfd4a816f34cfe36c716f40a7297d4bf5224dc343eab4d8d3982a149cd6e06bae00643e2ee258a8e062e1e6b5c90ae8b4365da526263593417d5839535ec0000000006851811c1afab090e6413f2b73ef562a3a881833350ef1035889416de9b3eb7cdfedc2c336713b462618279e6bb5bcb3b20d260013"], 0x1c}}, 0x0)

16:49:52 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x4}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:52 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2888.160821][T28931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:52 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4)

16:49:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000600)="0f21ea0f01c50fc71b450fc77b780f50c266ba430066b8f22f66efc4c2dd8eaa0048000066420f73dd8647f40f09", 0x2e}], 0x1, 0x7, &(0x7f0000000680), 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004808)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$KVM_NMI(r5, 0xae9a)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004811}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={0x1c, r10, 0x301, 0x0, 0x0, {{0x67}, {@val={0x4}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x71}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x28}}, 0x44000)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)

[ 2888.541683][T28950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:52 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xf000000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x4, 0x0, 0x200000000000600, 0x7000000}}], 0xff00, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x10000a006)

16:49:53 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x2000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2888.950547][T28955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2889.027661][T28959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:53 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
dup(r4) (async)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000600)="0f21ea0f01c50fc71b450fc77b780f50c266ba430066b8f22f66efc4c2dd8eaa0048000066420f73dd8647f40f09", 0x2e}], 0x1, 0x7, &(0x7f0000000680), 0x0) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000600)="0f21ea0f01c50fc71b450fc77b780f50c266ba430066b8f22f66efc4c2dd8eaa0048000066420f73dd8647f40f09", 0x2e}], 0x1, 0x7, &(0x7f0000000680), 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004808) (async)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004808)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$KVM_NMI(r5, 0xae9a) (async)
ioctl$KVM_NMI(r5, 0xae9a)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004811}, 0x0) (async)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004811}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={0x1c, r10, 0x301, 0x0, 0x0, {{0x67}, {@val={0x4}, @void}}}, 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={0x1c, r10, 0x301, 0x0, 0x0, {{0x67}, {@val={0x4}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x71}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x28}}, 0x44000)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)

16:49:53 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x5)

16:49:53 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x5}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2889.635385][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:54 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:54 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x3000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async, rerun: 32)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2) (rerun: 32)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000600)="0f21ea0f01c50fc71b450fc77b780f50c266ba430066b8f22f66efc4c2dd8eaa0048000066420f73dd8647f40f09", 0x2e}], 0x1, 0x7, &(0x7f0000000680), 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004808) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$KVM_NMI(r5, 0xae9a)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004811}, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={0x1c, r10, 0x301, 0x0, 0x0, {{0x67}, {@val={0x4}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x71}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x28}}, 0x44000) (async)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)

[ 2890.206733][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:54 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:54 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6)

16:49:54 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xa}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2890.786400][T29000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:55 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

16:49:55 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:55 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x4000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:55 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x7)

16:49:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040881}, 0x44840)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2a, 0x7, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x40440d4)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000048000300000000000000000800000000", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e102, 0x0)
syz_io_uring_setup(0xc61, &(0x7f0000000240)={0x0, 0x8ccc, 0x10, 0x3, 0x3d6, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300))

[ 2891.546151][T29007] validate_nla: 64 callbacks suppressed
[ 2891.546225][T29007] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:55 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:56 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xb}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040881}, 0x44840) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2a, 0x7, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x40440d4) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000048000300000000000000000800000000", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e102, 0x0)
syz_io_uring_setup(0xc61, &(0x7f0000000240)={0x0, 0x8ccc, 0x10, 0x3, 0x3d6, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300))

[ 2892.157150][T29019] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:56 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x8)

16:49:56 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040881}, 0x44840) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2a, 0x7, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x40440d4)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000048000300000000000000000800000000", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) (async)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e102, 0x0)
syz_io_uring_setup(0xc61, &(0x7f0000000240)={0x0, 0x8ccc, 0x10, 0x3, 0x3d6, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300))

16:49:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x5000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2892.492496][T29027] __nla_validate_parse: 4 callbacks suppressed
[ 2892.492564][T29027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2892.685880][T29030] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:56 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x490202, 0x0)

16:49:56 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee", 0x36, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x6000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x40, r4, 0xe0ccf0f2d388eeeb, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r8, 0x0, 0x78)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r9, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r9, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r9, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)

[ 2893.088568][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2893.101132][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:57 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xc}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:57 executing program 1:
r0 = socket(0x29, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='B', 0x1}], 0x1}}], 0xfffffdef, 0x0)

[ 2893.230884][T29043] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2893.318759][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
16:49:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x9)

[ 2893.399709][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
16:49:57 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee", 0x36, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x40, r4, 0xe0ccf0f2d388eeeb, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r8, 0x0, 0x78) (async)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r9, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r9, @ANYBLOB="08000200ac"], 0x20}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r9, @ANYBLOB="08000200ac"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r9], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)

[ 2893.626300][T29049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2893.846719][T29051] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:58 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x7000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:58 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee", 0x36, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2894.202852][T29057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2894.235847][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x40, r4, 0xe0ccf0f2d388eeeb, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r8, 0x0, 0x78) (async)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r9, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r9, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r9, @ANYBLOB="08000200ac"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r9], 0x20}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)

16:49:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xa)

16:49:58 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xe}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2894.631154][T29065] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2894.691087][T29071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:58 executing program 1:
r0 = socket(0x29, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='B', 0x500120}], 0x1}}], 0x1, 0x0)

16:49:59 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2895.044743][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:49:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

16:49:59 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x8000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xb)

[ 2895.374778][T29080] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:49:59 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:49:59 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xf}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:49:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

[ 2895.993298][T29092] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:00 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xc)

16:50:00 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x9000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

16:50:00 executing program 1:
r0 = socket(0x29, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e40)="f2", 0x1}], 0x1}}], 0x2, 0x0)
close(r0)

[ 2896.659557][T29103] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:01 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x10}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x8000}, 0xc)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:01 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508dd", 0x5f, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xd)

[ 2897.532680][T29124] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2897.692686][T29128] __nla_validate_parse: 6 callbacks suppressed
[ 2897.692839][T29128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:01 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508dd", 0x5f, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x8000}, 0xc)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
dup(r5) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x8000}, 0xc) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:50:02 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xa000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:02 executing program 1:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="d5fdb6bf73dee5330155"], 0x14}}, 0x0)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)='B', 0x1}], 0x300}}], 0x1, 0x0)

[ 2898.124147][T29130] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:02 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x11}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:02 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508dd", 0x5f, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2898.432068][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:02 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x7})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000140), 0x0)
writev(r1, 0x0, 0xfffffffffffffd83)
r2 = socket$netlink(0x10, 0x3, 0x4)
recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x0, &(0x7f0000006c80)={0x0, 0x989680})
poll(&(0x7f0000000100)=[{r2}, {0xffffffffffffffff, 0x45b}], 0x2, 0xfff)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002c80)=ANY=[@ANYBLOB="2e7e07a613854cb12d4f035b414d24197956f686f64fd6cb09a734e8bf0efe70da0b240c7a4fe9879094d8e34c2677ac7dcb246af5faa73080158041cd4e1620cac16fc2780c7c43d57bc922724c05000000446093774808d238cac0ed574fbede25db35f22b35ad44542bf37cd9aee982e2185d43f7cf52989e5f42d59c0af0015922de65f9d5f5e3a9f14e931d329cf5c9367d36b9050735d164e4a23fa0"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x4000})
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006540), r4)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f000000bec0)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000065c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="43000300", @ANYRES16=r5, @ANYBLOB="85c0a5107695bd02128efb400d8cc52c7b360f321bde80f02436911cd109f14447a0b6c83664dd38b9327ad1957b1fb8c507383b08e029e89afcdb77ee56b6ccca5a664da6096b8f50ecdbc3a6392f69d3bd258400b8b9747019f6f04929985c432ffe03a433c341e31cc6235ffbe944"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x44004015)
ioctl$FS_IOC_RESVSP(r4, 0x10, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5ffffe})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006cc0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000002fc0)=0xe8)
ioctl$TUNSETOWNER(r4, 0x400454cc, r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000080)=0x7f, 0x4)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f000000bf00)=0xa961, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x6a)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15f4}], 0x1, 0x0, 0xbac70006}, 0x700)

16:50:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xe)

[ 2898.725533][T29150] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:03 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa794", 0x66, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x8000}, 0xc)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2899.098040][T29156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xf000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x12}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2899.416289][T29159] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:03 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa794", 0x66, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2899.542825][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2899.605463][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2899.752952][T29171] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xf)

16:50:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x160, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20}, 0x800)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={<r5=>r0})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r9, 0x0, 0x78)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r10, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r10, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r10, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040052}, 0x20009000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:04 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa794", 0x66, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2900.168467][T29177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2900.179992][T29179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2900.296237][T29180] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:04 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x10000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2900.491816][T29177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
16:50:04 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9e", 0x69, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2900.570459][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:05 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x7})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000140), 0x0)
writev(r1, 0x0, 0xfffffffffffffd83)
r2 = socket$netlink(0x10, 0x3, 0x4)
recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x0, &(0x7f0000006c80)={0x0, 0x989680})
poll(&(0x7f0000000100)=[{r2}, {0xffffffffffffffff, 0x45b}], 0x2, 0xfff)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002c80)=ANY=[@ANYBLOB="2e7e07a613854cb12d4f035b414d24197956f686f64fd6cb09a734e8bf0efe70da0b240c7a4fe9879094d8e34c2677ac7dcb246af5faa73080158041cd4e1620cac16fc2780c7c43d57bc922724c05000000446093774808d238cac0ed574fbede25db35f22b35ad44542bf37cd9aee982e2185d43f7cf52989e5f42d59c0af0015922de65f9d5f5e3a9f14e931d329cf5c9367d36b9050735d164e4a23fa0"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x4000})
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006540), r4)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f000000bec0)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000065c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="43000300", @ANYRES16=r5, @ANYBLOB="85c0a5107695bd02128efb400d8cc52c7b360f321bde80f02436911cd109f14447a0b6c83664dd38b9327ad1957b1fb8c507383b08e029e89afcdb77ee56b6ccca5a664da6096b8f50ecdbc3a6392f69d3bd258400b8b9747019f6f04929985c432ffe03a433c341e31cc6235ffbe944"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x44004015)
ioctl$FS_IOC_RESVSP(r4, 0x10, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5ffffe})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006cc0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000002fc0)=0xe8)
ioctl$TUNSETOWNER(r4, 0x400454cc, r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000080)=0x7f, 0x4)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f000000bf00)=0xa961, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x6a)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15f4}], 0x1, 0x0, 0xbac70006}, 0x700)

16:50:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x160, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20}, 0x800)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={<r5=>r0})
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r9, 0x0, 0x78) (async)
write$binfmt_elf64(r9, 0x0, 0x78)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r10, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r10, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r10, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r10, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040052}, 0x20009000) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040052}, 0x20009000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:05 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x13}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x10)

[ 2900.890810][T29188] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:05 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9e", 0x69, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2901.128094][T29196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x160, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20}, 0x800)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={<r5=>r0})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r9, 0x0, 0x78)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r10, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r10, @ANYBLOB="08000200ac"], 0x20}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r10, @ANYBLOB="08000200ac"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r10], 0x20}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040052}, 0x20009000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x11)

[ 2901.603211][T29207] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:05 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9e", 0x69, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
getsockopt(r0, 0x401, 0x2, &(0x7f0000000240)=""/240, &(0x7f0000000040)=0xf0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000050000000000000000000b0000fa422461c834113ec5c3bebd37b24c31c20828d9c06db5d7d4398ff4123f13039ae3cfda3a014a789f4c9a432a056f4d718a59787466202df35e03171aab3e21cc5d7c2d8d180925566531b4bb3562c60402c53e8c241cacc98dcac4dc93d031a75bca612edd1e9e19b35587ff02514e602decc77b96f8e104191c0ae42eea336025bf57a8a48bbadca9c20edf389190a590db075d65fcbbc38560ec3540"], 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000480)={0x1, 'ip6_vti0\x00', {}, 0x8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0))
recvmsg(r4, &(0x7f0000000900)={&(0x7f0000000500)=@nl, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/117, 0x75}], 0x5, &(0x7f0000000480)}, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, {0xa, 0x4a1c, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8a39}, 0x1, {[0x2, 0xd01, 0x2, 0x9, 0x83, 0x7, 0x6, 0x3ff]}}, 0x5c)
socket(0x9, 0x80000, 0x8000)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="22b30bd92d3e059a959e85bad39bf09f12000000c64b", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0)

16:50:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x10000120}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:06 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x14}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2902.439581][T29221] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2902.482467][T29221] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2902.583375][T29216] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x12)

[ 2903.040016][T29230] __nla_validate_parse: 6 callbacks suppressed
[ 2903.040086][T29230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:07 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x7})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000140), 0x0)
writev(r1, 0x0, 0xfffffffffffffd83)
r2 = socket$netlink(0x10, 0x3, 0x4)
recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x0, &(0x7f0000006c80)={0x0, 0x989680})
poll(&(0x7f0000000100)=[{r2}, {0xffffffffffffffff, 0x45b}], 0x2, 0xfff)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002c80)=ANY=[@ANYBLOB="2e7e07a613854cb12d4f035b414d24197956f686f64fd6cb09a734e8bf0efe70da0b240c7a4fe9879094d8e34c2677ac7dcb246af5faa73080158041cd4e1620cac16fc2780c7c43d57bc922724c05000000446093774808d238cac0ed574fbede25db35f22b35ad44542bf37cd9aee982e2185d43f7cf52989e5f42d59c0af0015922de65f9d5f5e3a9f14e931d329cf5c9367d36b9050735d164e4a23fa0"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x4000})
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006540), r4)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f000000bec0)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000065c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="43000300", @ANYRES16=r5, @ANYBLOB="85c0a5107695bd02128efb400d8cc52c7b360f321bde80f02436911cd109f14447a0b6c83664dd38b9327ad1957b1fb8c507383b08e029e89afcdb77ee56b6ccca5a664da6096b8f50ecdbc3a6392f69d3bd258400b8b9747019f6f04929985c432ffe03a433c341e31cc6235ffbe944"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x44004015)
ioctl$FS_IOC_RESVSP(r4, 0x10, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5ffffe})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006cc0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000002fc0)=0xe8)
ioctl$TUNSETOWNER(r4, 0x400454cc, r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000080)=0x7f, 0x4)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f000000bf00)=0xa961, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x6a)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15f4}], 0x1, 0x0, 0xbac70006}, 0x700)

16:50:07 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x15}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
getsockopt(r0, 0x401, 0x2, &(0x7f0000000240)=""/240, &(0x7f0000000040)=0xf0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000050000000000000000000b0000fa422461c834113ec5c3bebd37b24c31c20828d9c06db5d7d4398ff4123f13039ae3cfda3a014a789f4c9a432a056f4d718a59787466202df35e03171aab3e21cc5d7c2d8d180925566531b4bb3562c60402c53e8c241cacc98dcac4dc93d031a75bca612edd1e9e19b35587ff02514e602decc77b96f8e104191c0ae42eea336025bf57a8a48bbadca9c20edf389190a590db075d65fcbbc38560ec3540"], 0x14}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000480)={0x1, 'ip6_vti0\x00', {}, 0x8}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0)) (async)
recvmsg(r4, &(0x7f0000000900)={&(0x7f0000000500)=@nl, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/117, 0x75}], 0x5, &(0x7f0000000480)}, 0x1) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, {0xa, 0x4a1c, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8a39}, 0x1, {[0x2, 0xd01, 0x2, 0x9, 0x83, 0x7, 0x6, 0x3ff]}}, 0x5c)
socket(0x9, 0x80000, 0x8000) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="22b30bd92d3e059a959e85bad39bf09f12000000c64b", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0)

16:50:07 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a", 0x6b, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:07 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x11000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2903.768598][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2903.785120][T29231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2903.828471][T29239] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2903.977228][T29245] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x13)

16:50:08 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a", 0x6b, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
getsockopt(r0, 0x401, 0x2, &(0x7f0000000240)=""/240, &(0x7f0000000040)=0xf0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000050000000000000000000b0000fa422461c834113ec5c3bebd37b24c31c20828d9c06db5d7d4398ff4123f13039ae3cfda3a014a789f4c9a432a056f4d718a59787466202df35e03171aab3e21cc5d7c2d8d180925566531b4bb3562c60402c53e8c241cacc98dcac4dc93d031a75bca612edd1e9e19b35587ff02514e602decc77b96f8e104191c0ae42eea336025bf57a8a48bbadca9c20edf389190a590db075d65fcbbc38560ec3540"], 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000480)={0x1, 'ip6_vti0\x00', {}, 0x8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r5, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0)) (async)
recvmsg(r4, &(0x7f0000000900)={&(0x7f0000000500)=@nl, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/117, 0x75}], 0x5, &(0x7f0000000480)}, 0x1) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, {0xa, 0x4a1c, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8a39}, 0x1, {[0x2, 0xd01, 0x2, 0x9, 0x83, 0x7, 0x6, 0x3ff]}}, 0x5c) (async, rerun: 64)
socket(0x9, 0x80000, 0x8000) (async, rerun: 64)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="22b30bd92d3e059a959e85bad39bf09f12000000c64b", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0)

[ 2904.431842][T29251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2904.791143][T29254] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2904.838296][T29257] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:50:09 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x16}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:09 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x13000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2904.961748][T29257] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:50:09 executing program 1:
r0 = socket(0x29, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000100)='B', 0x1}], 0x1}}], 0x2, 0x0)

[ 2905.187772][T29258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a", 0x6b, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000000100"/20], 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffffffffff77)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x25)

16:50:09 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfd2)

[ 2905.777882][T29273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2905.929882][T29276] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000000100"/20], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffffffffff77)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:10 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x17}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x20010010}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:10 executing program 1:
r0 = socket(0x22, 0x2, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

16:50:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000000100"/20], 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffffffffff77)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2906.482832][T29289] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:10 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0xfffffff7}, 0x1c)

16:50:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0xb8, 0xb8, 0x1b0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff000000, 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "5da1"}}, @common=@addrtype={{0x30}, {0x802, 0x332eaffa53ab9240}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8b31, 0x82b, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00, 0xff, 'syz_tun\x00', 'pim6reg1\x00', {}, {0xff}, 0x13f, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x2c3, 0x10, [0x2c, 0x16, 0x6, 0x3a, 0x1, 0x2b, 0x2d, 0x33, 0x37, 0xf, 0x1d, 0x3b, 0x3d, 0x5, 0x0, 0x3e], 0x0, 0x7, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4c800)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2906.739958][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:11 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040), &(0x7f0000000380)=0x4)

16:50:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x48)

[ 2907.126218][T29302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:11 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x2c010000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x18}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:11 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

[ 2907.556512][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:11 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2907.638442][T29308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0xb8, 0xb8, 0x1b0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff000000, 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "5da1"}}, @common=@addrtype={{0x30}, {0x802, 0x332eaffa53ab9240}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8b31, 0x82b, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00, 0xff, 'syz_tun\x00', 'pim6reg1\x00', {}, {0xff}, 0x13f, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x2c3, 0x10, [0x2c, 0x16, 0x6, 0x3a, 0x1, 0x2b, 0x2d, 0x33, 0x37, 0xf, 0x1d, 0x3b, 0x3d, 0x5, 0x0, 0x3e], 0x0, 0x7, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 64)
sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4c800) (rerun: 64)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4c)

[ 2907.994318][T29317] validate_nla: 1 callbacks suppressed
[ 2907.994393][T29317] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2908.071704][T29321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:12 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$char_usb(r0, 0x0, 0x17)

16:50:12 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0xb8, 0xb8, 0x1b0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff000000, 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "5da1"}}, @common=@addrtype={{0x30}, {0x802, 0x332eaffa53ab9240}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8b31, 0x82b, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00, 0xff, 'syz_tun\x00', 'pim6reg1\x00', {}, {0xff}, 0x13f, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x2c3, 0x10, [0x2c, 0x16, 0x6, 0x3a, 0x1, 0x2b, 0x2d, 0x33, 0x37, 0xf, 0x1d, 0x3b, 0x3d, 0x5, 0x0, 0x3e], 0x0, 0x7, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4c800) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:12 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0)

16:50:12 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x38000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2908.525401][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:12 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x19}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2908.721599][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2908.746109][T29334] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:12 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @multicast1}, &(0x7f0000000040)=0xc)

16:50:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x60)

16:50:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:13 executing program 0:
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000f267fb9a3a432478d9834675d40f4568077152fa95fdb092000000002222"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x2000c000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2b, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x40044)

16:50:13 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff)

[ 2909.195280][T29347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2909.286241][T29348] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:13 executing program 0:
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00') (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000f267fb9a3a432478d9834675d40f4568077152fa95fdb092000000002222"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x2000c000) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2b, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x40044)

[ 2909.543162][T29351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2909.645988][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:13 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1a}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:13 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x3f000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:13 executing program 1:
pipe2$9p(&(0x7f00000020c0)={<r0=>0xffffffffffffffff}, 0x800)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)

[ 2909.777290][T29361] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:13 executing program 0:
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00')
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000f267fb9a3a432478d9834675d40f4568077152fa95fdb092000000002222"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x2000c000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2b, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x40044)

16:50:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x68)

16:50:14 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2910.107725][T29370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000018c4d9b355395e430000000083dbe40a1add81cfce4435e6a9b8197ffdcc7e4a4ff36ff61c88b2a565d56b8dbfb67066ad90cf1c9a5cf215c4ce6553cd076622ab0d1ec7cf8d13b948d3ff0b3c86c86d890c9377b9f3a51816596db2f3225824786279f4c7846bbdc8a38a05e94e"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000240)=0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0x4f0, 0x29, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0x6, 0x5}, {0x2, 0xe}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3, 0x1, 0x5, 0xae, 0xc5, 0x1, 0x8, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x12, 0x0, 0x0, 0x7f, 0x4, 0x8000, 0x2, 0x40000000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x2, 0x5, 0x0, 0x9, 0x3f, 0x6, 0x8000, 0x6, 0x10001, 0x80, 0x80000000, 0x8001, 0x8, 0x7fff, 0x1ff, 0x6, 0x1000, 0xfffffff8, 0x0, 0x1ce0e603, 0xef55, 0x8, 0xff, 0xfffffffe, 0x7, 0x5, 0xffffffff, 0xc10, 0x3f, 0x76, 0x7, 0x7bb7, 0xfffffdae, 0x3f, 0x101, 0x9, 0x0, 0xe8, 0x8000, 0x3ff, 0x3, 0x1, 0x7, 0x88c8, 0x1, 0x7, 0x2, 0x6, 0x1f, 0x9, 0xd8, 0x4, 0xc2, 0x1, 0x0, 0x856, 0x400, 0x2800, 0x80000000, 0x9, 0x6, 0x7fff, 0x80, 0x1, 0x5, 0x800, 0x0, 0x0, 0x6, 0x65e7, 0x1, 0x20, 0x3ff, 0x400, 0xabd, 0x2, 0x7fffffff, 0x801f, 0x8, 0x2, 0x929, 0x0, 0x0, 0x4, 0x7ff, 0x4, 0x32, 0x7fffffff, 0xc20, 0x4, 0x8, 0x0, 0x6, 0xfffffffd, 0x80, 0x10000, 0x9, 0x1, 0x8, 0x101, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x1000, 0x6, 0xe211, 0x1, 0x7f, 0x5, 0x7, 0x3, 0x7fff, 0xff, 0xff, 0x100, 0xb029, 0x7ff, 0xfffffffc, 0x1, 0x72, 0x7, 0x5, 0x10000, 0x6, 0x9, 0x4d4f, 0xfffffff7, 0xff7effff, 0x785e02db, 0x7, 0x9, 0x3195, 0x4, 0x5, 0x7, 0x448, 0x7ff, 0x100, 0x9, 0x2, 0x40, 0x5, 0x4, 0xfffffff7, 0x0, 0xa00, 0x1000, 0x300000, 0x5, 0x8, 0x4, 0x8, 0x234, 0x7ff, 0xfffffffa, 0x6, 0x101, 0x3, 0x7422, 0x984, 0x4, 0x200, 0x6, 0xfffffffa, 0x3, 0x1, 0xfff, 0x2, 0x8, 0x3, 0x8, 0x80000001, 0xb84, 0x82, 0x5, 0xfffffc00, 0x5, 0x0, 0x1, 0x4, 0x3, 0x3f, 0x1, 0x10001, 0x0, 0x8, 0x20, 0x20, 0x6, 0x1ff, 0x3ff, 0x9, 0xc8a, 0x3, 0xfc, 0x3, 0x5, 0x0, 0x3, 0x0, 0x5, 0x2e4, 0x8, 0x489, 0x9, 0x5, 0x1, 0xd, 0x7, 0x8, 0xfffff801, 0x9, 0x7, 0x9, 0x333d, 0x0, 0x5, 0xffffff55, 0xdb27, 0x8, 0x0, 0x9, 0x6dae, 0x5, 0x8000, 0x40, 0x6, 0x458, 0x8, 0x8, 0x40, 0x1, 0xffff8ad5, 0x1000, 0x101, 0x9, 0xab, 0xa4, 0x1, 0xc01e, 0x6, 0xfffffffc, 0x8, 0x400, 0x0, 0x0, 0x971, 0x40, 0x20, 0x2, 0xdf2289e, 0x36c40000, 0x5]}, @TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x2, 0xff, 0x101, 0x16d9, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xe, 0x0, 0x4, 0xfd, 0x1, 0x1000, 0x7fff, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xe}, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xe}, 0x3, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0xc1, 0x0, 0xe9a, 0x0, 0x2, 0xa8c}}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x1f}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000b7e771590804b47e8c798febcb24d3582823669803e14f0192124d8b91a699a93b001bf6ea0de7b06223598d7408eb2b9b5a0f535125aafe78901c381509dca8a6d00723ec2b5ea4ce1d05fc3468dc3d6e0803329b7783d6f0f858150a4863edf5e8b50770733b7466766ce13d4bc994e3c684e2651401d5783908a35a9b642635d6c8e055c16364b992c47de0927059a31290b9cb3a2c3421a4467b5854ed1703b2c69e0ba39f375e3266cc41176c9437a450a1ca48ea5406e9c9d5f083da60649889847356d4ee952775cfe3f2d9ba61993405b90b634eda9d41c3739322f9dd5e0cc5eb4bfff9186af9a1532bbc98", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

16:50:14 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0xfffffffffffffe6b}, 0xffffff5d)
write$FUSE_WRITE(r0, 0x0, 0x0)

[ 2910.341679][T29374] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2910.444401][T29378] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2910.465937][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:14 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2910.500248][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:14 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x52)

16:50:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6c)

16:50:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000018c4d9b355395e430000000083dbe40a1add81cfce4435e6a9b8197ffdcc7e4a4ff36ff61c88b2a565d56b8dbfb67066ad90cf1c9a5cf215c4ce6553cd076622ab0d1ec7cf8d13b948d3ff0b3c86c86d890c9377b9f3a51816596db2f3225824786279f4c7846bbdc8a38a05e94e"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000240)=0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0x4f0, 0x29, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0x6, 0x5}, {0x2, 0xe}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3, 0x1, 0x5, 0xae, 0xc5, 0x1, 0x8, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x12, 0x0, 0x0, 0x7f, 0x4, 0x8000, 0x2, 0x40000000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x2, 0x5, 0x0, 0x9, 0x3f, 0x6, 0x8000, 0x6, 0x10001, 0x80, 0x80000000, 0x8001, 0x8, 0x7fff, 0x1ff, 0x6, 0x1000, 0xfffffff8, 0x0, 0x1ce0e603, 0xef55, 0x8, 0xff, 0xfffffffe, 0x7, 0x5, 0xffffffff, 0xc10, 0x3f, 0x76, 0x7, 0x7bb7, 0xfffffdae, 0x3f, 0x101, 0x9, 0x0, 0xe8, 0x8000, 0x3ff, 0x3, 0x1, 0x7, 0x88c8, 0x1, 0x7, 0x2, 0x6, 0x1f, 0x9, 0xd8, 0x4, 0xc2, 0x1, 0x0, 0x856, 0x400, 0x2800, 0x80000000, 0x9, 0x6, 0x7fff, 0x80, 0x1, 0x5, 0x800, 0x0, 0x0, 0x6, 0x65e7, 0x1, 0x20, 0x3ff, 0x400, 0xabd, 0x2, 0x7fffffff, 0x801f, 0x8, 0x2, 0x929, 0x0, 0x0, 0x4, 0x7ff, 0x4, 0x32, 0x7fffffff, 0xc20, 0x4, 0x8, 0x0, 0x6, 0xfffffffd, 0x80, 0x10000, 0x9, 0x1, 0x8, 0x101, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x1000, 0x6, 0xe211, 0x1, 0x7f, 0x5, 0x7, 0x3, 0x7fff, 0xff, 0xff, 0x100, 0xb029, 0x7ff, 0xfffffffc, 0x1, 0x72, 0x7, 0x5, 0x10000, 0x6, 0x9, 0x4d4f, 0xfffffff7, 0xff7effff, 0x785e02db, 0x7, 0x9, 0x3195, 0x4, 0x5, 0x7, 0x448, 0x7ff, 0x100, 0x9, 0x2, 0x40, 0x5, 0x4, 0xfffffff7, 0x0, 0xa00, 0x1000, 0x300000, 0x5, 0x8, 0x4, 0x8, 0x234, 0x7ff, 0xfffffffa, 0x6, 0x101, 0x3, 0x7422, 0x984, 0x4, 0x200, 0x6, 0xfffffffa, 0x3, 0x1, 0xfff, 0x2, 0x8, 0x3, 0x8, 0x80000001, 0xb84, 0x82, 0x5, 0xfffffc00, 0x5, 0x0, 0x1, 0x4, 0x3, 0x3f, 0x1, 0x10001, 0x0, 0x8, 0x20, 0x20, 0x6, 0x1ff, 0x3ff, 0x9, 0xc8a, 0x3, 0xfc, 0x3, 0x5, 0x0, 0x3, 0x0, 0x5, 0x2e4, 0x8, 0x489, 0x9, 0x5, 0x1, 0xd, 0x7, 0x8, 0xfffff801, 0x9, 0x7, 0x9, 0x333d, 0x0, 0x5, 0xffffff55, 0xdb27, 0x8, 0x0, 0x9, 0x6dae, 0x5, 0x8000, 0x40, 0x6, 0x458, 0x8, 0x8, 0x40, 0x1, 0xffff8ad5, 0x1000, 0x101, 0x9, 0xab, 0xa4, 0x1, 0xc01e, 0x6, 0xfffffffc, 0x8, 0x400, 0x0, 0x0, 0x971, 0x40, 0x20, 0x2, 0xdf2289e, 0x36c40000, 0x5]}, @TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x2, 0xff, 0x101, 0x16d9, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xe, 0x0, 0x4, 0xfd, 0x1, 0x1000, 0x7fff, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xe}, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xe}, 0x3, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0xc1, 0x0, 0xe9a, 0x0, 0x2, 0xa8c}}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x1f}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000b7e771590804b47e8c798febcb24d3582823669803e14f0192124d8b91a699a93b001bf6ea0de7b06223598d7408eb2b9b5a0f535125aafe78901c381509dca8a6d00723ec2b5ea4ce1d05fc3468dc3d6e0803329b7783d6f0f858150a4863edf5e8b50770733b7466766ce13d4bc994e3c684e2651401d5783908a35a9b642635d6c8e055c16364b992c47de0927059a31290b9cb3a2c3421a4467b5854ed1703b2c69e0ba39f375e3266cc41176c9437a450a1ca48ea5406e9c9d5f083da60649889847356d4ee952775cfe3f2d9ba61993405b90b634eda9d41c3739322f9dd5e0cc5eb4bfff9186af9a1532bbc98", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

[ 2910.845782][T29381] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2910.900276][T29385] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:15 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1b}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:15 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x40000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:15 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

16:50:15 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2911.177889][T29389] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:50:15 executing program 1:
mq_open(&(0x7f0000000000)='^\x00\x15\xa6\xca06\x13S\x16\xf0\xe4-\xa8\x00\x00\x00\x00\xf7\x1f\xb4\x11k\xf4M\xea\xce\xb3\x96\xca\xf1\xd3K+sq^\xcegZ\xd5\v\xb3\x1b\xec\xd3\xf7e\xc0\'$\x13;3\xcbM`\xd6\x14X5-W\a\x0ev\xd9o[\xe2\xfb\xab\x9f\xb8Q\x8c\x11\x1d\x8cj*\x85\x88N\xef\x94\x0fX\x90\xab3h\xa8\xaf\xea\xb6\xe1SSa\xcbk\xd1\x9cF\xa6\f\xba\xd6q\xea\x8e\xb6{\xf6a\xc9\x05\x14!MN\xd8\x19@\xb3\xc7\xe0\x80\x95\xeeW\x0e\xe1\x87\xe3\xf7\xf4\xe9\x02\xd7\x81\x84\xf8\x19Y\xb8p\x90%s#\xf0OA+q\xf0\xd0\xce\x9e\xcd\x86#9\xcd\x16\xb5K\x00\x00\x00\x00\x00\x00\xde\x1c\xea:\xda\x9b\x85\x87\xa3\xe5\xb4\xdd\xebC\xbb\xc8;\xf9>\xfd\x1f\x99\xf6N\xa9\x98\x06x\x04\x039\x83J\xb0$\x9c\xbcYq\xc4\xa6\xdeI\xc2n4\xcbl!/\x17\x1f\xf2 DC}\xae\x875?\xae\xaaZ\b$\x8c\xf1\x1bv\xbe\x8ad(\xe6v\x02\xf2/\x17rM\f\r^\xda\v\xca3\xf09\xa6\x80Pe_\b\xe7\xc6\xd5q\xfc/\x98\x87\\\xcc{\xf8\x90\xc3\x1cRb\x03r\xee?S\fL\xael\xf6$\x98\x8am\xfc\x04\xcdsv(R\xd5\xc6!\xa0\xb1\x8fP\x90\x9c\x82\r\x9c~\x17\x9fh\xca7\xf02w==\x9a\"d_]\xfc\xb2i\x17\x13\x84q\xda\xdd\x934\x02\xa1y(\xe9\x1b\xe1kA?\x7f\xce\x8b=\\\x1c\xe8\xe6', 0x800, 0x39, &(0x7f0000000180))

[ 2911.359494][T29398] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000018c4d9b355395e430000000083dbe40a1add81cfce4435e6a9b8197ffdcc7e4a4ff36ff61c88b2a565d56b8dbfb67066ad90cf1c9a5cf215c4ce6553cd076622ab0d1ec7cf8d13b948d3ff0b3c86c86d890c9377b9f3a51816596db2f3225824786279f4c7846bbdc8a38a05e94e"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000240)=0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0x4f0, 0x29, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0x6, 0x5}, {0x2, 0xe}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3, 0x1, 0x5, 0xae, 0xc5, 0x1, 0x8, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x12, 0x0, 0x0, 0x7f, 0x4, 0x8000, 0x2, 0x40000000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x2, 0x5, 0x0, 0x9, 0x3f, 0x6, 0x8000, 0x6, 0x10001, 0x80, 0x80000000, 0x8001, 0x8, 0x7fff, 0x1ff, 0x6, 0x1000, 0xfffffff8, 0x0, 0x1ce0e603, 0xef55, 0x8, 0xff, 0xfffffffe, 0x7, 0x5, 0xffffffff, 0xc10, 0x3f, 0x76, 0x7, 0x7bb7, 0xfffffdae, 0x3f, 0x101, 0x9, 0x0, 0xe8, 0x8000, 0x3ff, 0x3, 0x1, 0x7, 0x88c8, 0x1, 0x7, 0x2, 0x6, 0x1f, 0x9, 0xd8, 0x4, 0xc2, 0x1, 0x0, 0x856, 0x400, 0x2800, 0x80000000, 0x9, 0x6, 0x7fff, 0x80, 0x1, 0x5, 0x800, 0x0, 0x0, 0x6, 0x65e7, 0x1, 0x20, 0x3ff, 0x400, 0xabd, 0x2, 0x7fffffff, 0x801f, 0x8, 0x2, 0x929, 0x0, 0x0, 0x4, 0x7ff, 0x4, 0x32, 0x7fffffff, 0xc20, 0x4, 0x8, 0x0, 0x6, 0xfffffffd, 0x80, 0x10000, 0x9, 0x1, 0x8, 0x101, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x1000, 0x6, 0xe211, 0x1, 0x7f, 0x5, 0x7, 0x3, 0x7fff, 0xff, 0xff, 0x100, 0xb029, 0x7ff, 0xfffffffc, 0x1, 0x72, 0x7, 0x5, 0x10000, 0x6, 0x9, 0x4d4f, 0xfffffff7, 0xff7effff, 0x785e02db, 0x7, 0x9, 0x3195, 0x4, 0x5, 0x7, 0x448, 0x7ff, 0x100, 0x9, 0x2, 0x40, 0x5, 0x4, 0xfffffff7, 0x0, 0xa00, 0x1000, 0x300000, 0x5, 0x8, 0x4, 0x8, 0x234, 0x7ff, 0xfffffffa, 0x6, 0x101, 0x3, 0x7422, 0x984, 0x4, 0x200, 0x6, 0xfffffffa, 0x3, 0x1, 0xfff, 0x2, 0x8, 0x3, 0x8, 0x80000001, 0xb84, 0x82, 0x5, 0xfffffc00, 0x5, 0x0, 0x1, 0x4, 0x3, 0x3f, 0x1, 0x10001, 0x0, 0x8, 0x20, 0x20, 0x6, 0x1ff, 0x3ff, 0x9, 0xc8a, 0x3, 0xfc, 0x3, 0x5, 0x0, 0x3, 0x0, 0x5, 0x2e4, 0x8, 0x489, 0x9, 0x5, 0x1, 0xd, 0x7, 0x8, 0xfffff801, 0x9, 0x7, 0x9, 0x333d, 0x0, 0x5, 0xffffff55, 0xdb27, 0x8, 0x0, 0x9, 0x6dae, 0x5, 0x8000, 0x40, 0x6, 0x458, 0x8, 0x8, 0x40, 0x1, 0xffff8ad5, 0x1000, 0x101, 0x9, 0xab, 0xa4, 0x1, 0xc01e, 0x6, 0xfffffffc, 0x8, 0x400, 0x0, 0x0, 0x971, 0x40, 0x20, 0x2, 0xdf2289e, 0x36c40000, 0x5]}, @TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x2, 0xff, 0x101, 0x16d9, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xe, 0x0, 0x4, 0xfd, 0x1, 0x1000, 0x7fff, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xe}, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xe}, 0x3, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0xc1, 0x0, 0xe9a, 0x0, 0x2, 0xa8c}}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x1f}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000b7e771590804b47e8c798febcb24d3582823669803e14f0192124d8b91a699a93b001bf6ea0de7b06223598d7408eb2b9b5a0f535125aafe78901c381509dca8a6d00723ec2b5ea4ce1d05fc3468dc3d6e0803329b7783d6f0f858150a4863edf5e8b50770733b7466766ce13d4bc994e3c684e2651401d5783908a35a9b642635d6c8e055c16364b992c47de0927059a31290b9cb3a2c3421a4467b5854ed1703b2c69e0ba39f375e3266cc41176c9437a450a1ca48ea5406e9c9d5f083da60649889847356d4ee952775cfe3f2d9ba61993405b90b634eda9d41c3739322f9dd5e0cc5eb4bfff9186af9a1532bbc98", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000018c4d9b355395e430000000083dbe40a1add81cfce4435e6a9b8197ffdcc7e4a4ff36ff61c88b2a565d56b8dbfb67066ad90cf1c9a5cf215c4ce6553cd076622ab0d1ec7cf8d13b948d3ff0b3c86c86d890c9377b9f3a51816596db2f3225824786279f4c7846bbdc8a38a05e94e"], 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000240)=0x4) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0x4f0, 0x29, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0x6, 0x5}, {0x2, 0xe}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3, 0x1, 0x5, 0xae, 0xc5, 0x1, 0x8, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x12, 0x0, 0x0, 0x7f, 0x4, 0x8000, 0x2, 0x40000000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x2, 0x5, 0x0, 0x9, 0x3f, 0x6, 0x8000, 0x6, 0x10001, 0x80, 0x80000000, 0x8001, 0x8, 0x7fff, 0x1ff, 0x6, 0x1000, 0xfffffff8, 0x0, 0x1ce0e603, 0xef55, 0x8, 0xff, 0xfffffffe, 0x7, 0x5, 0xffffffff, 0xc10, 0x3f, 0x76, 0x7, 0x7bb7, 0xfffffdae, 0x3f, 0x101, 0x9, 0x0, 0xe8, 0x8000, 0x3ff, 0x3, 0x1, 0x7, 0x88c8, 0x1, 0x7, 0x2, 0x6, 0x1f, 0x9, 0xd8, 0x4, 0xc2, 0x1, 0x0, 0x856, 0x400, 0x2800, 0x80000000, 0x9, 0x6, 0x7fff, 0x80, 0x1, 0x5, 0x800, 0x0, 0x0, 0x6, 0x65e7, 0x1, 0x20, 0x3ff, 0x400, 0xabd, 0x2, 0x7fffffff, 0x801f, 0x8, 0x2, 0x929, 0x0, 0x0, 0x4, 0x7ff, 0x4, 0x32, 0x7fffffff, 0xc20, 0x4, 0x8, 0x0, 0x6, 0xfffffffd, 0x80, 0x10000, 0x9, 0x1, 0x8, 0x101, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x1000, 0x6, 0xe211, 0x1, 0x7f, 0x5, 0x7, 0x3, 0x7fff, 0xff, 0xff, 0x100, 0xb029, 0x7ff, 0xfffffffc, 0x1, 0x72, 0x7, 0x5, 0x10000, 0x6, 0x9, 0x4d4f, 0xfffffff7, 0xff7effff, 0x785e02db, 0x7, 0x9, 0x3195, 0x4, 0x5, 0x7, 0x448, 0x7ff, 0x100, 0x9, 0x2, 0x40, 0x5, 0x4, 0xfffffff7, 0x0, 0xa00, 0x1000, 0x300000, 0x5, 0x8, 0x4, 0x8, 0x234, 0x7ff, 0xfffffffa, 0x6, 0x101, 0x3, 0x7422, 0x984, 0x4, 0x200, 0x6, 0xfffffffa, 0x3, 0x1, 0xfff, 0x2, 0x8, 0x3, 0x8, 0x80000001, 0xb84, 0x82, 0x5, 0xfffffc00, 0x5, 0x0, 0x1, 0x4, 0x3, 0x3f, 0x1, 0x10001, 0x0, 0x8, 0x20, 0x20, 0x6, 0x1ff, 0x3ff, 0x9, 0xc8a, 0x3, 0xfc, 0x3, 0x5, 0x0, 0x3, 0x0, 0x5, 0x2e4, 0x8, 0x489, 0x9, 0x5, 0x1, 0xd, 0x7, 0x8, 0xfffff801, 0x9, 0x7, 0x9, 0x333d, 0x0, 0x5, 0xffffff55, 0xdb27, 0x8, 0x0, 0x9, 0x6dae, 0x5, 0x8000, 0x40, 0x6, 0x458, 0x8, 0x8, 0x40, 0x1, 0xffff8ad5, 0x1000, 0x101, 0x9, 0xab, 0xa4, 0x1, 0xc01e, 0x6, 0xfffffffc, 0x8, 0x400, 0x0, 0x0, 0x971, 0x40, 0x20, 0x2, 0xdf2289e, 0x36c40000, 0x5]}, @TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x2, 0xff, 0x101, 0x16d9, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xe, 0x0, 0x4, 0xfd, 0x1, 0x1000, 0x7fff, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xe}, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xe}, 0x3, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0xc1, 0x0, 0xe9a, 0x0, 0x2, 0xa8c}}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x1f}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000b7e771590804b47e8c798febcb24d3582823669803e14f0192124d8b91a699a93b001bf6ea0de7b06223598d7408eb2b9b5a0f535125aafe78901c381509dca8a6d00723ec2b5ea4ce1d05fc3468dc3d6e0803329b7783d6f0f858150a4863edf5e8b50770733b7466766ce13d4bc994e3c684e2651401d5783908a35a9b642635d6c8e055c16364b992c47de0927059a31290b9cb3a2c3421a4467b5854ed1703b2c69e0ba39f375e3266cc41176c9437a450a1ca48ea5406e9c9d5f083da60649889847356d4ee952775cfe3f2d9ba61993405b90b634eda9d41c3739322f9dd5e0cc5eb4bfff9186af9a1532bbc98", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async)

16:50:15 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x2040, &(0x7f0000000100))

16:50:15 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={0x0, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x74)

16:50:15 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000002c0), &(0x7f0000000140)=0x98)

[ 2911.765252][T29406] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:50:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={0x0, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:16 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4008804)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getneigh={0x6c, 0x1e, 0x0, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x40408}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_MASTER={0x8}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x880)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:16 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x44000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:16 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="f397a990e963", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @local, @remote}}}}, 0x0)

16:50:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x7a)

16:50:16 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000200), &(0x7f0000000280)=0x8)

16:50:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4008804)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getneigh={0x6c, 0x1e, 0x0, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x40408}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_MASTER={0x8}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:16 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={0x0, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2913.023746][T29436] validate_nla: 3 callbacks suppressed
[ 2913.023808][T29436] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:17 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0)={0x0, @in, 0x1f, 0x0, 0x209}, 0x98)

16:50:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4008804)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getneigh={0x6c, 0x1e, 0x0, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x40408}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_MASTER={0x8}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x880)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4008804) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getneigh={0x6c, 0x1e, 0x0, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x20040, 0x40408}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_MASTER={0x8}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:50:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:17 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1d}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2913.347125][T29439] __nla_validate_parse: 6 callbacks suppressed
[ 2913.347196][T29439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:17 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0x47ee0000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2913.469254][T29438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:17 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000480), 0x8)

16:50:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r0})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2b782edb7ffa1517}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x810)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf9}}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = eventfd2(0x0, 0x0)
io_setup(0x88, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f00000027c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r6}])
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2913.573080][T29450] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x300)

16:50:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:18 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
bind(r0, &(0x7f0000000080)=@un=@file={0xa}, 0xa)

[ 2913.929132][T29462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2914.060178][T29461] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r0})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2b782edb7ffa1517}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x810)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf9}}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async, rerun: 64)
r5 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
r6 = eventfd2(0x0, 0x0) (async)
io_setup(0x88, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f00000027c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2914.313103][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2914.344213][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:18 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:18 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1e}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:18 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xdc050000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:18 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"/3239], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$TCFLSH(r2, 0x540b, 0x0)

16:50:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x500)

[ 2914.824779][T29476] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2914.863628][T29485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r0})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2b782edb7ffa1517}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x810) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf9}}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
r5 = socket$igmp(0x2, 0x3, 0x2) (async)
r6 = eventfd2(0x0, 0x0) (async)
io_setup(0x88, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f00000027c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r6}])
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2915.199411][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2915.220842][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x600)

16:50:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x412200, 0x0)
r2 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r2, 0x10000})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2915.508908][T29492] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:19 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x21}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2915.667364][T29494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:19 executing program 1:
socketpair(0x2, 0x3, 0x3a, &(0x7f0000001740))

16:50:19 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:19 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xe0ffffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:20 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x412200, 0x0)
dup(r0) (async)
r2 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r2, 0x10000})
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

16:50:20 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')

[ 2916.071931][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2916.145973][T29507] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x700)

16:50:20 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:20 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f00000013c0)=""/199, 0xc7, 0x5, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x4380, 0x6)
r3 = creat(0x0, 0x0)
ioctl$TCSBRK(r3, 0x5409, 0x1000)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
get_robust_list(r4, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x57, 0x4, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x0, r2+30000000}, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

16:50:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x412200, 0x0)
r2 = dup(r0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={r2, 0x10000})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2916.785473][T29520] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:21 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x22}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:21 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xfc000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:21 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2917.242804][ T1214] ieee802154 phy0 wpan0: encryption failed: -22
[ 2917.249491][ T1214] ieee802154 phy1 wpan1: encryption failed: -22
[ 2917.288756][T29532] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x900)

16:50:21 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:22 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffac}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x203}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffb613}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x148}}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x9}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={<r8=>0x0, @empty, @initdev}, &(0x7f00000002c0)=0xc)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r12=>r3, {0x67}}, './file0\x00'})
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2918.493492][T29540] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:22 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x23}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:22 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xfe800000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xa00)

16:50:23 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2918.945422][T29550] __nla_validate_parse: 7 callbacks suppressed
[ 2918.945584][T29550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2919.402175][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2919.416153][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2919.611136][T29553] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:24 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) (async)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffac}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x203}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffb613}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x148}}, 0x40) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x9}}, './file0\x00'}) (async)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) (async, rerun: 32)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={<r8=>0x0, @empty, @initdev}, &(0x7f00000002c0)=0xc) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r12=>r3, {0x67}}, './file0\x00'})
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:24 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xb00)

16:50:24 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x24}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:24 executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f00000013c0)=""/199, 0xc7, 0x5, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x4380, 0x6)
r3 = creat(0x0, 0x0)
ioctl$TCSBRK(r3, 0x5409, 0x1000)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
get_robust_list(r4, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x57, 0x4, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x0, r2+30000000}, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

16:50:24 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xfe80ffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2920.381140][T29564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2920.435505][T29569] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:24 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:24 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b) (async)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffac}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x203}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffb613}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x148}}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3) (async)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={<r8=>0x0, @empty, @initdev}, &(0x7f00000002c0)=0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r12=>r3, {0x67}}, './file0\x00'})
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2920.886056][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:25 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xfec0ffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2921.148930][T29564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x26}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2921.225044][T29576] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:25 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xc00)

16:50:25 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:25 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r1=>0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = memfd_create(&(0x7f0000000140)='\x00', 0x6)
r7 = accept4(r4, &(0x7f00000004c0)=@xdp, &(0x7f0000000540)=0x80, 0x80000)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000015c0)=<r8=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001680)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r9=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001a80)={{r7}, r8, 0x4, @inherit={0x70, &(0x7f0000001600)={0x1, 0x5, 0x0, 0x5, {0x32, 0x21af, 0x7ff, 0x0, 0x8000000000000000}, [0x7, 0x6c8, 0x3, 0x100, 0x400]}}, @devid=r9})
r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0xc240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @func, @exit], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x20, '\x00', r1, 0x0, r4, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r10, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)}, 0x90)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000010000000000000"], 0x14}}, 0x0)
getsockname$packet(r13, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="d0c85a010700000000000000000d00000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x0)

[ 2921.869152][T29588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2921.907584][T29589] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:26 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2922.126750][T29591] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2922.388678][T29588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2922.479528][T29588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:27 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_create(0xd6)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
getpid()
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x0, 0xf6a7}, &(0x7f0000000140)={0x0, r2+30000000}, 0x0)

16:50:27 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x29}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:27 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xff000000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xd00)

16:50:27 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r1=>0x0}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = memfd_create(&(0x7f0000000140)='\x00', 0x6) (async)
r7 = accept4(r4, &(0x7f00000004c0)=@xdp, &(0x7f0000000540)=0x80, 0x80000) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000015c0)=<r8=>0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001680)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r9=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001a80)={{r7}, r8, 0x4, @inherit={0x70, &(0x7f0000001600)={0x1, 0x5, 0x0, 0x5, {0x32, 0x21af, 0x7ff, 0x0, 0x8000000000000000}, [0x7, 0x6c8, 0x3, 0x100, 0x400]}}, @devid=r9})
r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0xc240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @func, @exit], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x20, '\x00', r1, 0x0, r4, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r10, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)}, 0x90) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r13 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000010000000000000"], 0x14}}, 0x0)
getsockname$packet(r13, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="d0c85a010700000000000000000d00000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x0)

[ 2923.672259][T29610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2923.737053][T29606] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:27 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2924.050429][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2924.093300][T29621] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2924.108065][T29616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:28 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r1=>0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = memfd_create(&(0x7f0000000140)='\x00', 0x6)
r7 = accept4(r4, &(0x7f00000004c0)=@xdp, &(0x7f0000000540)=0x80, 0x80000)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000015c0)=<r8=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001680)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r9=>0x0}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001a80)={{r7}, r8, 0x4, @inherit={0x70, &(0x7f0000001600)={0x1, 0x5, 0x0, 0x5, {0x32, 0x21af, 0x7ff, 0x0, 0x8000000000000000}, [0x7, 0x6c8, 0x3, 0x100, 0x400]}}, @devid=r9})
r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0xc240, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @func, @exit], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x20, '\x00', r1, 0x0, r4, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r10, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)}, 0x90)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000010000000000000"], 0x14}}, 0x0)
getsockname$packet(r13, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="d0c85a010700000000000000000d00000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
dup(r3) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
memfd_create(&(0x7f0000000140)='\x00', 0x6) (async)
accept4(r4, &(0x7f00000004c0)=@xdp, &(0x7f0000000540)=0x80, 0x80000) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000015c0)) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001680)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001a80)={{r7}, r8, 0x4, @inherit={0x70, &(0x7f0000001600)={0x1, 0x5, 0x0, 0x5, {0x32, 0x21af, 0x7ff, 0x0, 0x8000000000000000}, [0x7, 0x6c8, 0x3, 0x100, 0x400]}}, @devid=r9}) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0xc240, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @func, @exit], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x20, '\x00', r1, 0x0, r4, 0x8, &(0x7f00000002c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r10, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)}, 0x90) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000010000000000000"], 0x14}}, 0x0) (async)
getsockname$packet(r13, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="d0c85a010700000000000000000d00000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x0) (async)

16:50:28 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xe00)

16:50:28 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:28 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2a}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2924.575355][T29631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2924.688498][T29637] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:28 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xff600000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:29 executing program 1:
syz_clone(0x40000080, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="7a0e38ea74259d5746e65e75b4a5e7d790cffbc8785f3447c674067d32f7cb60657936f129d095b9d1b6b8f452a8d5b84bfec6400c343707888708aef7e9973be3860eef11c9a0f9771227f8dc383f17dfe32fbadb81")

16:50:29 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2925.079114][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2925.104587][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2925.179253][T29645] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:29 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xf00)

16:50:29 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2925.585104][T29651] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2925.666201][T29649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:29 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:30 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd}, {0x6}}}}}}]}}, 0x0)

16:50:30 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2c}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:30 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xffff0000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2926.132331][T29657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2926.192604][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2926.223494][T29663] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:30 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:30 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x1100)

16:50:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2926.571819][T20183] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 2926.666993][T29676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2926.756700][T29679] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2926.988457][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2927.007569][T20183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2927.021619][T20183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
16:50:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000000000000000000000000ffe3"], 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4422038c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x278, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xeef7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7ff}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x982}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x100000000}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4041}, 0x20008010)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

16:50:31 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2927.031855][T20183] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2927.042587][T20183] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2927.055247][T20183] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2927.065467][T20183] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
16:50:31 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2d}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:31 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xffff80fe}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000000000000000000000000ffe3"], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4422038c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x278, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xeef7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7ff}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x982}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x100000000}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4041}, 0x20008010) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4422038c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x278, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xeef7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7ff}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x982}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x100000000}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4041}, 0x20008010)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2927.312611][T20183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2927.324633][T20183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2927.333281][T20183] usb 2-1: Product: syz
[ 2927.337676][T20183] usb 2-1: Manufacturer: syz
[ 2927.342921][T20183] usb 2-1: SerialNumber: syz
[ 2927.379166][T29685] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2927.684807][T20183] cdc_ncm 2-1:1.0: bind() failure
[ 2927.703403][T20183] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2927.710545][T20183] cdc_ncm 2-1:1.1: bind() failure
[ 2927.879479][T20183] usb 2-1: USB disconnect, device number 30
16:50:32 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x1200)

16:50:32 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000000000000000000000000ffe3"], 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async, rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4422038c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x278, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xeef7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7ff}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x982}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x100000000}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4041}, 0x20008010) (async, rerun: 64)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

16:50:32 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x1, &(0x7f0000000bc0)=@raw=[@alu], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

16:50:32 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2e}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2928.507811][T29702] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:32 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xffffc0fe}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:32 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000080)=@raw=[@exit, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x6b, &(0x7f0000000140)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

16:50:33 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000bcc48b056e446ef165e8ba000d00000208000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

16:50:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x1223)

[ 2929.216773][T29714] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2929.244453][T29719] __nla_validate_parse: 4 callbacks suppressed
[ 2929.244525][T29719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (rerun: 32)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000bcc48b056e446ef165e8ba000d00000208000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

16:50:33 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x2f}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:33 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x9, &(0x7f0000000080)=@raw=[@exit, @btf_id, @map_val, @jmp, @ldst, @kfunc, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

16:50:33 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:33 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xffffff7f}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000bcc48b056e446ef165e8ba000d00000208000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

[ 2929.906732][T29727] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2930.001479][T29719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:34 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x1300)

16:50:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000002200"/20], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82002016}, 0xc, &(0x7f0000000240)={&(0x7f0000002180)={0x1bb8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x1760, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x2, 0x0, 0xeb, 0x3, 0x1ff, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xe2f]}, @beacon_params=[@NL80211_ATTR_IE={0x1ab, 0x2a, [@random={0x3, 0xc, "cf673b1ed190601e2cce020b"}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x80}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @random_vendor={0xdd, 0xf2, "bec2d9781fd41c5c6586753e511b1bf2fc3cf1fcd7109906e1895df05e997e79000190e4d44a691dee8877a5b7677a93517dbea4a632853d1f2bc77b27319a7aece12f53bbac0f633d21a8c35f3fd63c59809632f80a979b1faafc6699ad2c5c8311d30b9bc2630613293393b364c510ae1ec75bfce4006cec8464ebd3a00db0bf5d665f436a8cd9ecacb7f9dd0bd75ea7a9bf78af563deaf66582d199adf7d4e888c07b75ac30515aa7e52c6716f7be5f6628fd48f2bbe4b209c39edb68b415777e011279483a404ca38f1ca360db9f681fd6bb83b383797e030901f7962267462e149870c5a49294f03c19723d5d9ec33e"}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x2, @device_b, 0x7fffffff, @device_b, 0x7fffffff, 0x2, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xe, 0xc1}}, @supported_rates={0x1, 0x1, [{0x1}]}, @dsss={0x3, 0x1, 0xd}, @measure_req={0x26, 0x54, {0x9, 0x2, 0x1, "4f470d18d47d37d246cb3885300f5802a978e1143f1abe643454cd24c4b121b492d87086ce515d3290d026c7d14b821a997c6ed665bac9d253141df755059c0000cdd33bccf0fca060680aaa42528416b4"}}, @sec_chan_ofs={0x3e, 0x1}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x50, 0x3, "5df2171c9bc8855ca3a2bb975af4e66724860845a1ecdaf9f497f786f8b483004d8e29938faa224053ce0182db20793e98db96afe897e31e770c2481cda55e5649a56262705cc76e08eec324"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "b2d441e94919e000a3db6fea6a05f8f6d6df3bf6c9bab40774f113888e214c71f729cd54ca190f8877874171f17a7d6869a924adabff3c6963de517d6c37dfc5c0ac1f1ff56fa5d5af46122cae88358224426fb3b0b68d2234bff6113974ec972a9639cecf1972fe439742c384eff2a321eb1f509a24723d4175be2a20a92c79e3a2a2faec3371880373b7cb32a610"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "9492a87d4066a4c057091789a93f1357920119a5b8ec68a86a3e"}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "a48e1ea87432b517365bc25d6b8dea6e12ddbd292209466ebf16c6e59498e661bf2d429f123f4890ddb49b9b9fcd549879f1cb7245f7b912e30da1c1dd0686b5fc3e4431ad768307eebb0bd8edbb2611801d6d4f45cb0f2d2d22b3009914f5e35e0b81d48da3f7a4ebf0117669e614143674527888f45ff3f7eeb5d1d9a73a67693c34faac5e5a9bf73a5c3817e36f7f0749e1f068ce8d84ea7f947f322169dce459ba86a077aa4dc8500ba8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "670c6387ca2f761162e6a744c318ae58685fae5d59c1ee40495d92071ee79c2ee0e4010da62df350307cae"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a6, 0x80, [@tim={0x5, 0x24, {0x8, 0xcb, 0x6, "2c1b9395647c5845660768b4cbff95ff54c6f5dc4ecf87e6e844796b9c05b50e38"}}, @fast_bss_trans={0x37, 0xaf, {0xf8, 0x6, "3ef73a3179d50d3d7504e3f4f3d92d16", "b53d684c9f767aa29131ed6c88034815f071698cbb36deb9834d0159305b4d48", "915ec67048b00c79a4a37595e6b7ea2622baab8791c978e3ac9aaa681c4e1ae5", [{0x4, 0x15, "e828708b43126efbd953a64c99bdb2e1975d1cba22"}, {0x3, 0x12, "94c5a9b8d79dca7f375aa20cd3e1dc509166"}, {0x2, 0x1c, "b6309d5e3530db94498699da6ee8b5b5932cc1d208d30a05c12baaad"}, {0x4, 0x3, "9d9826"}, {0x1, 0x4, "3f101dc7"}, {0x4, 0x7, "f53ba58982c72a"}]}}, @link_id={0x65, 0x12, {@from_mac}}, @random={0x20, 0xa8, "91086a9b78ef311362281b0d97f1e97fc186198da538161995c911139966c411d89df66bfe898581aa560d3e1b0d467fd549b68df92433071241efb1be5bb08e86c7fd8b6527db2001a58e0360756426efc9545ab7c2ea36cec57fdc547700ec074e436ef288a6264baceab1ad2bce80da5de04dde807f1f4095dfe1836f51b32fd8dfd95c48d702e38e0de023a9dd15d816db82d42b0fd7c61e5fd4d6e6f950ca184c4f866bdf63"}, @supported_rates={0x1, 0x8, [{0x6c, 0x1}, {0x12, 0x1}, {0x5}, {0xb, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0xc}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@cf={0x4, 0x6, {0x69, 0x1, 0x4, 0x7fff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x25c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x100, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc, 0x3, "9415a29212b38884"}, @NL80211_FTM_RESP_ATTR_LCI={0xfe, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4a, 0x3, "40b56b20eaa2006e23a62a7c7a0a3ac1fceaccceff8c5e2a5650979de2c30ac0cfa2bfd4ef3fea99d99653eeec0fe635642e34ac8cdc0d4eeb7030346303ff658e7881a4da57"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ba, 0x7f, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x4, 0xe1, 0x0, @broadcast, 0x7fff, "", 0xd58, 0x7f, 0x2, [{{}, @device_b, 0x200}, {{0x1, 0x0, 0x1}, @device_a, 0x200}]}}, @ssid={0x0, 0xf, @random="7f7eb9b0dcc438922ea106074a37d4"}, @chsw_timing={0x68, 0x4, {0x0, 0x81}}, @preq={0x82, 0x20, @ext={{0x1, 0x1}, 0x0, 0x8, 0x3, @device_a, 0x0, @device_b, 0x2, 0xa3a0}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0x1, @broadcast, 0xa31, 0x8001, 0x40400}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x6, 0x6, 0x6, @device_a, 0x6, @device_a, 0x7e56, 0x6, 0x3, [{{0x1}, @device_b, 0x5}, {{}, @device_a, 0xbc}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0xcf, {0x5, 0xd0, 0x0, "039095e1a45f43f11f4fb04201813f1294a8c070d8a495633709b5b33e396f5045ef51716d8ba879156a83dc0e4bcd97cd0a83cc0cbc18e2a5af535dce591b707d9de2faa49dc6f5f24b2bd8d9be5c2d9985c228a4cebffb6af97df37fea86909f2de7ec6a08a1636fb1631d632f654b3bc89c8eaf432b38272027fec91813bf33e8066fddcc9c22e4ffddeb662b3b505b8a000bca2a6f3e84c92e620136dbddc27b1d9c137fcdcc70eb8fea0009e06abfc3bb8cc811c8f9356804da2f11add80f17fc042df4bfd94378c637"}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ibss={0x6, 0x2, 0x481}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xcf, 0x80, [@challenge={0x10, 0x1, 0x6e}, @perr={0x84, 0x9c, {0x7f, 0xa, [@not_ext={{}, @device_b, 0x4, "", 0x17}, @ext={{}, @device_a, 0x2, @device_b, 0x2d}, @ext={{}, @device_a, 0x4, @device_b, 0x37}, @ext={{}, @device_a, 0xffffffff, @broadcast, 0x19}, @ext={{}, @device_b, 0xff, @device_a, 0x30}, @not_ext={{}, @device_b, 0x6, "", 0x17}, @not_ext={{}, @device_a, 0x8, "", 0x1c}, @not_ext={{}, @broadcast, 0x9, "", 0x31}, @not_ext={{}, @device_b, 0x4a6, "", 0x3}, @not_ext={{}, @broadcast, 0x3c, "", 0x5}]}}, @random={0x4, 0x28, "0b28f6fa2a1423201eeb28c2de3d65190392ffc21985cced9c31f77e1cdc1a47328a21cf117fd1af"}]}, @NL80211_ATTR_BEACON_HEAD={0x332, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x8, 0x902}}, 0x2, @default, 0x4181, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x0, 0x4f6, 0xff}}, @val={0x6, 0x2, 0xad}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xfb, 0x95, 0x66}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0xd2, 0x8}}, @void, [{0xdd, 0xc8, "ff2b1059b263baf5f4388e6c66d086ed9ad15fca2460f3a708a20aa57cc8efc529d022a4f66f747ca22f1d017d3347b96ac98b5ec348ef387d9bc79c00e41c5513517cfc1a5411f0527828a620d6adf2c93136deea434956a308b53721add537f00a9ff4a4a41ad9212d8b04dc10480c1fc8e87e68b151ed72774215b8c7b11424032e21c8ee6d4e8d918364c12f6b6575e8b8bfaad0036d48d886a38ec55136999ffbaa56e509c7bb15f580fe93ae3b63f59ef656f51f371cf1e343939ac6576d4605d7f98f2a00"}, {0xdd, 0x52, "7c37b3a5e52d9013d6b90a4e4c2140a72212e56b3d52e3bc19d4cd28ddfb32e3f1e8e1f5b7975f24bccb15d31c5fcae834cce847fa5803049deba44359ccabcfc609893ed234ea78398d7dd35f1b328bca56"}, {0xdd, 0x98, "fbe0a8a5ab871e1984454f8ee5c98cd38adbbaaaff0abbea1851c1ef6dcfb9482b7864e935d02931cd619d9afef4e8a3c8a60eed6be47170c061b25ea74a49da83d45a2cd815576c77c2f4def9ffea3b51f39c9fb7bd29e6c7be5f8282f9ed62545252094d7930229cfbb8f248076b26c484fb9f33db547e4bf860fe86b3edd271e395773fd2110aeca31c71fda8194856c0762fd9a01d36"}, {0xdd, 0xf1, "46054f25ae121a6319de3f8d666784d29bddabba9b91cf35b0cc82e46055a66afb9605669ee9575f62e56e6527c81e033b17956ca827c612765a1480bc65e1e874c11c916a977985323b3176c0c42bcdce0d9dff0b78c999757da3718e9904a355a2a2350f49f118b78211f98606c3b0f19ae98c9a63aebbe32296a0907d9af14c571568c225da371e47c5a3e36e00ceeb8ee3a50b55589de1edbc316743bb620fe9fecbe8ced8ffc15025d966a94ece192f2d37e4abe39f7e8cccbd5f0f826770a6e9c4130b7498930e2b3acb16e4c0dcb5cab2582cdfb015513db1adbe6497b9d6645c7e77408016f344cba7f7749e80"}, {0xdd, 0x42, "b704a7c280ba8829b512a1da3d1ed3e00952f5b51bd3f37a3e64d4e363574d5b4576fa98cbcb302cffdda9998b628fc0df9fc0f1fe9e39d072f1d80a2b2b026bdb87"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x101, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xdb, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @initial, {0x0, 0xc00}}, @ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x800, @random=0x6, 0x0, @val={0x0, 0x8, @random="9828d0ffd246128c"}, @val={0x1, 0x8, [{0xb}, {0x9}, {0x18}, {0x1b, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x12}, {0x0, 0x1}]}, @val={0x3, 0x1, 0xd}, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0xc5}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x4, 0x0, {0x2, 0xff, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x8}}, @void, [{0xdd, 0x60, "0fc34f4e1ab5c1d01784434d0c236e873c882e6e14e908f9e026c117e06fe672bbfebfac4027f82639c9eafe5744ad4ea5909522a43107d87eabd54df6bfb76479a87cd234a9dba52e7b254238d3e156c8a8d0742cf6bfaf02b568230dcd371a"}]}}, @NL80211_ATTR_BEACON_HEAD={0xf6, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x94}, @broadcast, @device_b, @from_mac=@device_b, {0xd, 0x245}}, 0xd8b, @default, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x2f, {0xdb, 0xda, 0x8, "0c310f9edc8e47de5624f7a9112e924f7247ef4c2dc6e3b05269a69ab09009d3acc586d0d984819cd3df06fa"}}, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x72, 0x2, 0x1, 0x573d}}, [{0xdd, 0x8b, "6e14d208f2951cd5f975fb5beb67234af57117f9f186806cd933e092ddbc4eb5179ae883a52c9c3c8d4d9ddc8e152d4033d46a3bd51cd0317c758290716b9531d777b8bcc066fc53713b9f0afeb8349dc3b8a90fe7f65543ffc36770d8b430a2182bc02917813f445ada89879837ef508ac32df8f6e8b816f5c4bbdd02116678791d10b186a396c86493f3"}]}}, @NL80211_ATTR_IE={0x40, 0x2a, [@link_id={0x65, 0x12, {@random="0b4c94166233", @broadcast}}, @supported_rates={0x1, 0x2, [{0xb3adbfe0aa55a16c, 0x1}, {0x24}]}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x8, 0x1d9, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x800, 0x10001, 0xc1}}, @mesh_chsw={0x76, 0x6, {0xf7, 0x5, 0x9, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x428, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="531291eae8b1", {0x9, 0xff}}, 0x8, @default, 0x4, @void, @val={0x1, 0x3, [{0x2, 0x1}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb6}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x1, 0xb6, 0x79}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x94, "15bd76d7251295fc73e07e837d0d7a1c66c4a2cd8dbe8915b8828556d9ca538410bb9705bcf3b8755080c6ea09eb73635c9729dd40cf523bbeb3cbbfe23f418488da92c0bf174a59f9bd075b1192d01f5542b8d6c8ac8c270109eb328e4e5270154db22a1d5d8c8de9a18622219d86eecffc587e6f1d6e6a03b5e6108ce7042137c7b5b492fbab43d081361a1e9bfdf424b3bc2c"}, {0xdd, 0xc3, "dd2afa1abd589888951005868c5cf4594d3f523385d662a23d7571b54d822e04444ebefafeeb3210b28ee2edac4b1b836e69bdf51e24de9b3b9e4b800120f82120db0b4b12bf5e20b7b95f3f50b8fcc1552c36aece4772d71de54fc1f76987385ddcadcba6740c45592493ecef807151d6d4f787f3a90a6c08d92623ef5042224783167646e711017611156fd8949a5300f9c4cf196d3cfd80366b35e6129db8e696bd2e2dd0d2e55eafd8db174cad277f01904741794e6c6a82b929a731740c1904b0"}, {0xdd, 0xb6, "6af720be201569340105a95ae6de93a59b385106fef0ff4c100a743f0cbb4ad7e4eeec080e619989cc86fe3f1a86f7bfc1fd97c4aa59071b3ba2fea491e238e16a4479252ba2e4374b49e8c36283ffe46ecf422c171ecc9d0fb8bc50aa74d70d0837e904804c6d135d173be3a9ac6752fdc3fb9a4066a22a071e5cbe28e1be30c61535ac7e9d88eef530861ec36a6e9ff983be1afbc6c2930d4b8e084534dc90f30b8c847ebb55132a30cabb9e0bb0184a0c111990ab"}, {0xdd, 0xe1, "05f2fbc29ff00c54374bf3a970a459b45ec89642659ac894cca881c40ab3f1dadf9459840c7e891a4999118abc915e4562e473f8d75fe9a35e415a4ece893b2a8b374fde448df2a4258128f9904fb9c7707ff983345a4879875de460eda327bd17be2cdf3db75df81f490d9e03adf304855bf405f7c4364a474a8332eba169db0845b10bd9693601468572566b191f65959bbcacecf3cab18999bcde026b91c4724af1af94114e37dee590de413b2a299ca25ed6cc957594f706e65dffbb8a81c71bf0c9b9384e561ffbc250f4f99ed64befddf443ff5a2eba3ae868ab5da4add3"}, {0xdd, 0xf4, "80c206278f94c4a18822b6ed5a8ae13ccb0b3e323081fd39cc3d84176f7e89b59df6e328fc9bf3063cf74d8c216fb0f0e1c3cea78fd59773ab909d7bd539d4e15524f8e84c8507c015c2afb2300ccb075253f161372fe8d282261896a33f913e9f4c6c2efd82d4473d4ffa8c00602ed7d2ed985eacfea84ce8e192dc0ef39670ca1b6b49f098735339813e7bbd1082fbf9aaf35b7955b54384164aaceb1c192233c8971ba9f7235f49374f915b09d5f94c52b7a36cc93e9cfd9d8d2b7e994c98e7ea5dc2d147b9d147366c976dcd30cf423aad8789e5e380de8d4c359ddcaf1921a4796381001447f688871180063577c079fa4b"}]}}, @NL80211_ATTR_BEACON_HEAD={0x25a, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @random="326faaab3455", {0x2, 0x8}}, @ver_80211n={0x0, 0x80, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8001, @default, 0x400, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x33, 0x1, 0x20}}, @val={0x6, 0x2, 0x3}, @void, @val={0x25, 0x3, {0x1, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0x78, 0x9}}, @val={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x9f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0xb1, 0x40}}, @val={0x76, 0x6, {0x1, 0x1, 0x14, 0x8}}, [{0xdd, 0xee, "9f465a28832d7d01561dad116b0809f039972a8522751c0b2315787eebf57ae1acacc0c7eb147b93d1e09414341d4f77c7d324702feb04919686d1a5411352a98ebd6c2978868c1f037afbbdf9317340b6dd8c29da1ee7e36be4fc6cdd5e6297ed79feec229db33eef4a6877314b8341e311613af681ba071e9da3dbcee1aab17e9473f141e8e79b5e78547d930ae127b3e9b094d894a6187bfaad2286da08fd787e7eeeaab4146f757298b8d2647c3738f0bf992b2a5e62989be70a10fd38aec3a2f3632829835710baa73bf035069e627514e96957888cc30d26f59e7c787b6bceecabc221a2a564edee0c9249"}, {0xdd, 0xed, "43e16aedbbdc5c68b734f748033fe08888123adc870200fca7e8258450f2e13b8ddcf1e58765e2322c8769bc4e772f22a941d5ba7789f5209931ad80359c5a7d48ff12f020316a8778042cf08ec6b67633bc0509c19a161b7a630ef9760eec305bbf6126b7d6813e7f22623ec7b31c10b11ec67bdb02ca2a68d2b71a8187f7e836db5dcabf8b6bd5688b7f8ab0c4ca44e4905c5dc4499849ee484382e7d2ed486f3818283cf2794a966ac5db10100b84d1f8c72a670f29ddb8ee3902f8afeb59250edc029c3631da6acf9cfdc44d019812b9698145b19e5975c07bccdfe9f013c14d6b80a81cb2bcf5da5de497"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x2, @broadcast, 0x0, 0x7fffffff, 0x8000}}]}]]}, @NL80211_ATTR_CSA_IES={0x3f0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xaf, 0xf, [@fast_bss_trans={0x37, 0xa9, {0x7b, 0x4, "d18857c56438379deb7f41e78304a96d", "bb4957bb6213632c173341823acebce000432ed28f9db09b1beb14c1e20ef3c1", "e553a456609929b2f909ae328b83428ea3b82d9eec908d6b48b8ecb43a37403b", [{0x2, 0x25, "33a4a8fec67145525d4c6a7dbf9cda288b9d6955bf486155df1f1b938956d59160aab599b1"}, {0x1, 0x1b, "c7e810fbd3e5114a7a0dd925cb9865909c6458123179b6da267c43"}, {0x1, 0x7, "3b4dcf3bfd508e"}, {0x4, 0x8, "7a2b10736d67c5bf"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x148, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "a1d8756d2dde6f58bbc96adaadb6c53edb60356fbeb499936a08fd5849b68ccc59a04bb47e2ccf81ea8aa9479c402ebbc0c3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x103, 0x3, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x2e, 0x91, "e883f0d864af0da9c632153ee929e76bf3f6ed9e46773cafb4fbe4aab1c7eb9bdf06a2de7bc3bd280af7"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c3, 0x80, [@ibss={0x6, 0x2, 0x3ff}, @preq={0x82, 0x51, @not_ext={{0x1, 0x0, 0x1}, 0x0, 0x7, 0x2, @device_a, 0x2, "", 0x6, 0x101, 0x5, [{{0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_b, 0x10000}, {{0x1}, @device_a, 0x7}, {{}, @device_b, 0x1}]}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x1, 0x0, {0x7fff, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x7ff, 0x1f}}, @chsw_timing={0x68, 0x4, {0x2, 0x4}}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @perr={0x84, 0x10e, {0x50, 0x10, [@ext={{}, @device_a, 0x4, @device_b, 0x3f}, @not_ext={{}, @device_b, 0x8, "", 0x2c}, @ext={{}, @device_a, 0x80000000, @device_a, 0x23}, @ext={{}, @device_a, 0x7b, @device_b, 0x26}, @ext={{}, @device_b, 0x935, @broadcast, 0x39}, @ext={{}, @device_a, 0x0, @broadcast, 0x32}, @ext={{}, @device_b, 0x9, @device_a, 0xa}, @ext={{}, @broadcast, 0x4, @device_a, 0x22}, @not_ext={{}, @device_b, 0x7fffffff, "", 0xe}, @not_ext={{}, @device_a, 0x80000000, "", 0xc}, @not_ext={{}, @broadcast, 0x7690, "", 0x12}, @ext={{}, @device_b, 0x80000001, @device_b, 0x2}, @ext={{}, @device_b, 0x8, @device_b, 0x2a}, @not_ext={{}, @device_a, 0xb88, "", 0x6}, @ext={{}, @device_b, 0x8, @device_a, 0x11}, @not_ext={{}, @device_b, 0x10000, "", 0x13}]}}, @mic={0x8c, 0x10, {0xb79, "4145f0699722", @short="1c067b80ffd8f18a"}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2c7b, 0x6, 0x101, 0x8358, 0x9, 0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f76}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x1bb8}, 0x1, 0x0, 0x0, 0xc020}, 0x4004840)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:34 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc0045878, 0x0)

[ 2930.317750][T29739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2930.363069][T29736] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:34 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x30}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:34 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="677265eab8940a1570d3440000000000", @ANYRES32=0x0, @ANYBLOB="00208000000000078000000045"]})

16:50:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000002200"/20], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82002016}, 0xc, &(0x7f0000000240)={&(0x7f0000002180)={0x1bb8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x1760, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x2, 0x0, 0xeb, 0x3, 0x1ff, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xe2f]}, @beacon_params=[@NL80211_ATTR_IE={0x1ab, 0x2a, [@random={0x3, 0xc, "cf673b1ed190601e2cce020b"}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x80}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @random_vendor={0xdd, 0xf2, "bec2d9781fd41c5c6586753e511b1bf2fc3cf1fcd7109906e1895df05e997e79000190e4d44a691dee8877a5b7677a93517dbea4a632853d1f2bc77b27319a7aece12f53bbac0f633d21a8c35f3fd63c59809632f80a979b1faafc6699ad2c5c8311d30b9bc2630613293393b364c510ae1ec75bfce4006cec8464ebd3a00db0bf5d665f436a8cd9ecacb7f9dd0bd75ea7a9bf78af563deaf66582d199adf7d4e888c07b75ac30515aa7e52c6716f7be5f6628fd48f2bbe4b209c39edb68b415777e011279483a404ca38f1ca360db9f681fd6bb83b383797e030901f7962267462e149870c5a49294f03c19723d5d9ec33e"}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x2, @device_b, 0x7fffffff, @device_b, 0x7fffffff, 0x2, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xe, 0xc1}}, @supported_rates={0x1, 0x1, [{0x1}]}, @dsss={0x3, 0x1, 0xd}, @measure_req={0x26, 0x54, {0x9, 0x2, 0x1, "4f470d18d47d37d246cb3885300f5802a978e1143f1abe643454cd24c4b121b492d87086ce515d3290d026c7d14b821a997c6ed665bac9d253141df755059c0000cdd33bccf0fca060680aaa42528416b4"}}, @sec_chan_ofs={0x3e, 0x1}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x50, 0x3, "5df2171c9bc8855ca3a2bb975af4e66724860845a1ecdaf9f497f786f8b483004d8e29938faa224053ce0182db20793e98db96afe897e31e770c2481cda55e5649a56262705cc76e08eec324"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "b2d441e94919e000a3db6fea6a05f8f6d6df3bf6c9bab40774f113888e214c71f729cd54ca190f8877874171f17a7d6869a924adabff3c6963de517d6c37dfc5c0ac1f1ff56fa5d5af46122cae88358224426fb3b0b68d2234bff6113974ec972a9639cecf1972fe439742c384eff2a321eb1f509a24723d4175be2a20a92c79e3a2a2faec3371880373b7cb32a610"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "9492a87d4066a4c057091789a93f1357920119a5b8ec68a86a3e"}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "a48e1ea87432b517365bc25d6b8dea6e12ddbd292209466ebf16c6e59498e661bf2d429f123f4890ddb49b9b9fcd549879f1cb7245f7b912e30da1c1dd0686b5fc3e4431ad768307eebb0bd8edbb2611801d6d4f45cb0f2d2d22b3009914f5e35e0b81d48da3f7a4ebf0117669e614143674527888f45ff3f7eeb5d1d9a73a67693c34faac5e5a9bf73a5c3817e36f7f0749e1f068ce8d84ea7f947f322169dce459ba86a077aa4dc8500ba8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "670c6387ca2f761162e6a744c318ae58685fae5d59c1ee40495d92071ee79c2ee0e4010da62df350307cae"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a6, 0x80, [@tim={0x5, 0x24, {0x8, 0xcb, 0x6, "2c1b9395647c5845660768b4cbff95ff54c6f5dc4ecf87e6e844796b9c05b50e38"}}, @fast_bss_trans={0x37, 0xaf, {0xf8, 0x6, "3ef73a3179d50d3d7504e3f4f3d92d16", "b53d684c9f767aa29131ed6c88034815f071698cbb36deb9834d0159305b4d48", "915ec67048b00c79a4a37595e6b7ea2622baab8791c978e3ac9aaa681c4e1ae5", [{0x4, 0x15, "e828708b43126efbd953a64c99bdb2e1975d1cba22"}, {0x3, 0x12, "94c5a9b8d79dca7f375aa20cd3e1dc509166"}, {0x2, 0x1c, "b6309d5e3530db94498699da6ee8b5b5932cc1d208d30a05c12baaad"}, {0x4, 0x3, "9d9826"}, {0x1, 0x4, "3f101dc7"}, {0x4, 0x7, "f53ba58982c72a"}]}}, @link_id={0x65, 0x12, {@from_mac}}, @random={0x20, 0xa8, "91086a9b78ef311362281b0d97f1e97fc186198da538161995c911139966c411d89df66bfe898581aa560d3e1b0d467fd549b68df92433071241efb1be5bb08e86c7fd8b6527db2001a58e0360756426efc9545ab7c2ea36cec57fdc547700ec074e436ef288a6264baceab1ad2bce80da5de04dde807f1f4095dfe1836f51b32fd8dfd95c48d702e38e0de023a9dd15d816db82d42b0fd7c61e5fd4d6e6f950ca184c4f866bdf63"}, @supported_rates={0x1, 0x8, [{0x6c, 0x1}, {0x12, 0x1}, {0x5}, {0xb, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0xc}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@cf={0x4, 0x6, {0x69, 0x1, 0x4, 0x7fff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x25c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x100, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc, 0x3, "9415a29212b38884"}, @NL80211_FTM_RESP_ATTR_LCI={0xfe, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4a, 0x3, "40b56b20eaa2006e23a62a7c7a0a3ac1fceaccceff8c5e2a5650979de2c30ac0cfa2bfd4ef3fea99d99653eeec0fe635642e34ac8cdc0d4eeb7030346303ff658e7881a4da57"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ba, 0x7f, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x4, 0xe1, 0x0, @broadcast, 0x7fff, "", 0xd58, 0x7f, 0x2, [{{}, @device_b, 0x200}, {{0x1, 0x0, 0x1}, @device_a, 0x200}]}}, @ssid={0x0, 0xf, @random="7f7eb9b0dcc438922ea106074a37d4"}, @chsw_timing={0x68, 0x4, {0x0, 0x81}}, @preq={0x82, 0x20, @ext={{0x1, 0x1}, 0x0, 0x8, 0x3, @device_a, 0x0, @device_b, 0x2, 0xa3a0}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0x1, @broadcast, 0xa31, 0x8001, 0x40400}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x6, 0x6, 0x6, @device_a, 0x6, @device_a, 0x7e56, 0x6, 0x3, [{{0x1}, @device_b, 0x5}, {{}, @device_a, 0xbc}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0xcf, {0x5, 0xd0, 0x0, "039095e1a45f43f11f4fb04201813f1294a8c070d8a495633709b5b33e396f5045ef51716d8ba879156a83dc0e4bcd97cd0a83cc0cbc18e2a5af535dce591b707d9de2faa49dc6f5f24b2bd8d9be5c2d9985c228a4cebffb6af97df37fea86909f2de7ec6a08a1636fb1631d632f654b3bc89c8eaf432b38272027fec91813bf33e8066fddcc9c22e4ffddeb662b3b505b8a000bca2a6f3e84c92e620136dbddc27b1d9c137fcdcc70eb8fea0009e06abfc3bb8cc811c8f9356804da2f11add80f17fc042df4bfd94378c637"}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ibss={0x6, 0x2, 0x481}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xcf, 0x80, [@challenge={0x10, 0x1, 0x6e}, @perr={0x84, 0x9c, {0x7f, 0xa, [@not_ext={{}, @device_b, 0x4, "", 0x17}, @ext={{}, @device_a, 0x2, @device_b, 0x2d}, @ext={{}, @device_a, 0x4, @device_b, 0x37}, @ext={{}, @device_a, 0xffffffff, @broadcast, 0x19}, @ext={{}, @device_b, 0xff, @device_a, 0x30}, @not_ext={{}, @device_b, 0x6, "", 0x17}, @not_ext={{}, @device_a, 0x8, "", 0x1c}, @not_ext={{}, @broadcast, 0x9, "", 0x31}, @not_ext={{}, @device_b, 0x4a6, "", 0x3}, @not_ext={{}, @broadcast, 0x3c, "", 0x5}]}}, @random={0x4, 0x28, "0b28f6fa2a1423201eeb28c2de3d65190392ffc21985cced9c31f77e1cdc1a47328a21cf117fd1af"}]}, @NL80211_ATTR_BEACON_HEAD={0x332, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x8, 0x902}}, 0x2, @default, 0x4181, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x0, 0x4f6, 0xff}}, @val={0x6, 0x2, 0xad}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xfb, 0x95, 0x66}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0xd2, 0x8}}, @void, [{0xdd, 0xc8, "ff2b1059b263baf5f4388e6c66d086ed9ad15fca2460f3a708a20aa57cc8efc529d022a4f66f747ca22f1d017d3347b96ac98b5ec348ef387d9bc79c00e41c5513517cfc1a5411f0527828a620d6adf2c93136deea434956a308b53721add537f00a9ff4a4a41ad9212d8b04dc10480c1fc8e87e68b151ed72774215b8c7b11424032e21c8ee6d4e8d918364c12f6b6575e8b8bfaad0036d48d886a38ec55136999ffbaa56e509c7bb15f580fe93ae3b63f59ef656f51f371cf1e343939ac6576d4605d7f98f2a00"}, {0xdd, 0x52, "7c37b3a5e52d9013d6b90a4e4c2140a72212e56b3d52e3bc19d4cd28ddfb32e3f1e8e1f5b7975f24bccb15d31c5fcae834cce847fa5803049deba44359ccabcfc609893ed234ea78398d7dd35f1b328bca56"}, {0xdd, 0x98, "fbe0a8a5ab871e1984454f8ee5c98cd38adbbaaaff0abbea1851c1ef6dcfb9482b7864e935d02931cd619d9afef4e8a3c8a60eed6be47170c061b25ea74a49da83d45a2cd815576c77c2f4def9ffea3b51f39c9fb7bd29e6c7be5f8282f9ed62545252094d7930229cfbb8f248076b26c484fb9f33db547e4bf860fe86b3edd271e395773fd2110aeca31c71fda8194856c0762fd9a01d36"}, {0xdd, 0xf1, "46054f25ae121a6319de3f8d666784d29bddabba9b91cf35b0cc82e46055a66afb9605669ee9575f62e56e6527c81e033b17956ca827c612765a1480bc65e1e874c11c916a977985323b3176c0c42bcdce0d9dff0b78c999757da3718e9904a355a2a2350f49f118b78211f98606c3b0f19ae98c9a63aebbe32296a0907d9af14c571568c225da371e47c5a3e36e00ceeb8ee3a50b55589de1edbc316743bb620fe9fecbe8ced8ffc15025d966a94ece192f2d37e4abe39f7e8cccbd5f0f826770a6e9c4130b7498930e2b3acb16e4c0dcb5cab2582cdfb015513db1adbe6497b9d6645c7e77408016f344cba7f7749e80"}, {0xdd, 0x42, "b704a7c280ba8829b512a1da3d1ed3e00952f5b51bd3f37a3e64d4e363574d5b4576fa98cbcb302cffdda9998b628fc0df9fc0f1fe9e39d072f1d80a2b2b026bdb87"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x101, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xdb, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @initial, {0x0, 0xc00}}, @ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x800, @random=0x6, 0x0, @val={0x0, 0x8, @random="9828d0ffd246128c"}, @val={0x1, 0x8, [{0xb}, {0x9}, {0x18}, {0x1b, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x12}, {0x0, 0x1}]}, @val={0x3, 0x1, 0xd}, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0xc5}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x4, 0x0, {0x2, 0xff, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x8}}, @void, [{0xdd, 0x60, "0fc34f4e1ab5c1d01784434d0c236e873c882e6e14e908f9e026c117e06fe672bbfebfac4027f82639c9eafe5744ad4ea5909522a43107d87eabd54df6bfb76479a87cd234a9dba52e7b254238d3e156c8a8d0742cf6bfaf02b568230dcd371a"}]}}, @NL80211_ATTR_BEACON_HEAD={0xf6, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x94}, @broadcast, @device_b, @from_mac=@device_b, {0xd, 0x245}}, 0xd8b, @default, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x2f, {0xdb, 0xda, 0x8, "0c310f9edc8e47de5624f7a9112e924f7247ef4c2dc6e3b05269a69ab09009d3acc586d0d984819cd3df06fa"}}, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x72, 0x2, 0x1, 0x573d}}, [{0xdd, 0x8b, "6e14d208f2951cd5f975fb5beb67234af57117f9f186806cd933e092ddbc4eb5179ae883a52c9c3c8d4d9ddc8e152d4033d46a3bd51cd0317c758290716b9531d777b8bcc066fc53713b9f0afeb8349dc3b8a90fe7f65543ffc36770d8b430a2182bc02917813f445ada89879837ef508ac32df8f6e8b816f5c4bbdd02116678791d10b186a396c86493f3"}]}}, @NL80211_ATTR_IE={0x40, 0x2a, [@link_id={0x65, 0x12, {@random="0b4c94166233", @broadcast}}, @supported_rates={0x1, 0x2, [{0xb3adbfe0aa55a16c, 0x1}, {0x24}]}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x8, 0x1d9, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x800, 0x10001, 0xc1}}, @mesh_chsw={0x76, 0x6, {0xf7, 0x5, 0x9, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x428, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="531291eae8b1", {0x9, 0xff}}, 0x8, @default, 0x4, @void, @val={0x1, 0x3, [{0x2, 0x1}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb6}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x1, 0xb6, 0x79}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x94, "15bd76d7251295fc73e07e837d0d7a1c66c4a2cd8dbe8915b8828556d9ca538410bb9705bcf3b8755080c6ea09eb73635c9729dd40cf523bbeb3cbbfe23f418488da92c0bf174a59f9bd075b1192d01f5542b8d6c8ac8c270109eb328e4e5270154db22a1d5d8c8de9a18622219d86eecffc587e6f1d6e6a03b5e6108ce7042137c7b5b492fbab43d081361a1e9bfdf424b3bc2c"}, {0xdd, 0xc3, "dd2afa1abd589888951005868c5cf4594d3f523385d662a23d7571b54d822e04444ebefafeeb3210b28ee2edac4b1b836e69bdf51e24de9b3b9e4b800120f82120db0b4b12bf5e20b7b95f3f50b8fcc1552c36aece4772d71de54fc1f76987385ddcadcba6740c45592493ecef807151d6d4f787f3a90a6c08d92623ef5042224783167646e711017611156fd8949a5300f9c4cf196d3cfd80366b35e6129db8e696bd2e2dd0d2e55eafd8db174cad277f01904741794e6c6a82b929a731740c1904b0"}, {0xdd, 0xb6, "6af720be201569340105a95ae6de93a59b385106fef0ff4c100a743f0cbb4ad7e4eeec080e619989cc86fe3f1a86f7bfc1fd97c4aa59071b3ba2fea491e238e16a4479252ba2e4374b49e8c36283ffe46ecf422c171ecc9d0fb8bc50aa74d70d0837e904804c6d135d173be3a9ac6752fdc3fb9a4066a22a071e5cbe28e1be30c61535ac7e9d88eef530861ec36a6e9ff983be1afbc6c2930d4b8e084534dc90f30b8c847ebb55132a30cabb9e0bb0184a0c111990ab"}, {0xdd, 0xe1, "05f2fbc29ff00c54374bf3a970a459b45ec89642659ac894cca881c40ab3f1dadf9459840c7e891a4999118abc915e4562e473f8d75fe9a35e415a4ece893b2a8b374fde448df2a4258128f9904fb9c7707ff983345a4879875de460eda327bd17be2cdf3db75df81f490d9e03adf304855bf405f7c4364a474a8332eba169db0845b10bd9693601468572566b191f65959bbcacecf3cab18999bcde026b91c4724af1af94114e37dee590de413b2a299ca25ed6cc957594f706e65dffbb8a81c71bf0c9b9384e561ffbc250f4f99ed64befddf443ff5a2eba3ae868ab5da4add3"}, {0xdd, 0xf4, "80c206278f94c4a18822b6ed5a8ae13ccb0b3e323081fd39cc3d84176f7e89b59df6e328fc9bf3063cf74d8c216fb0f0e1c3cea78fd59773ab909d7bd539d4e15524f8e84c8507c015c2afb2300ccb075253f161372fe8d282261896a33f913e9f4c6c2efd82d4473d4ffa8c00602ed7d2ed985eacfea84ce8e192dc0ef39670ca1b6b49f098735339813e7bbd1082fbf9aaf35b7955b54384164aaceb1c192233c8971ba9f7235f49374f915b09d5f94c52b7a36cc93e9cfd9d8d2b7e994c98e7ea5dc2d147b9d147366c976dcd30cf423aad8789e5e380de8d4c359ddcaf1921a4796381001447f688871180063577c079fa4b"}]}}, @NL80211_ATTR_BEACON_HEAD={0x25a, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @random="326faaab3455", {0x2, 0x8}}, @ver_80211n={0x0, 0x80, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8001, @default, 0x400, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x33, 0x1, 0x20}}, @val={0x6, 0x2, 0x3}, @void, @val={0x25, 0x3, {0x1, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0x78, 0x9}}, @val={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x9f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0xb1, 0x40}}, @val={0x76, 0x6, {0x1, 0x1, 0x14, 0x8}}, [{0xdd, 0xee, "9f465a28832d7d01561dad116b0809f039972a8522751c0b2315787eebf57ae1acacc0c7eb147b93d1e09414341d4f77c7d324702feb04919686d1a5411352a98ebd6c2978868c1f037afbbdf9317340b6dd8c29da1ee7e36be4fc6cdd5e6297ed79feec229db33eef4a6877314b8341e311613af681ba071e9da3dbcee1aab17e9473f141e8e79b5e78547d930ae127b3e9b094d894a6187bfaad2286da08fd787e7eeeaab4146f757298b8d2647c3738f0bf992b2a5e62989be70a10fd38aec3a2f3632829835710baa73bf035069e627514e96957888cc30d26f59e7c787b6bceecabc221a2a564edee0c9249"}, {0xdd, 0xed, "43e16aedbbdc5c68b734f748033fe08888123adc870200fca7e8258450f2e13b8ddcf1e58765e2322c8769bc4e772f22a941d5ba7789f5209931ad80359c5a7d48ff12f020316a8778042cf08ec6b67633bc0509c19a161b7a630ef9760eec305bbf6126b7d6813e7f22623ec7b31c10b11ec67bdb02ca2a68d2b71a8187f7e836db5dcabf8b6bd5688b7f8ab0c4ca44e4905c5dc4499849ee484382e7d2ed486f3818283cf2794a966ac5db10100b84d1f8c72a670f29ddb8ee3902f8afeb59250edc029c3631da6acf9cfdc44d019812b9698145b19e5975c07bccdfe9f013c14d6b80a81cb2bcf5da5de497"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x2, @broadcast, 0x0, 0x7fffffff, 0x8000}}]}]]}, @NL80211_ATTR_CSA_IES={0x3f0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xaf, 0xf, [@fast_bss_trans={0x37, 0xa9, {0x7b, 0x4, "d18857c56438379deb7f41e78304a96d", "bb4957bb6213632c173341823acebce000432ed28f9db09b1beb14c1e20ef3c1", "e553a456609929b2f909ae328b83428ea3b82d9eec908d6b48b8ecb43a37403b", [{0x2, 0x25, "33a4a8fec67145525d4c6a7dbf9cda288b9d6955bf486155df1f1b938956d59160aab599b1"}, {0x1, 0x1b, "c7e810fbd3e5114a7a0dd925cb9865909c6458123179b6da267c43"}, {0x1, 0x7, "3b4dcf3bfd508e"}, {0x4, 0x8, "7a2b10736d67c5bf"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x148, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "a1d8756d2dde6f58bbc96adaadb6c53edb60356fbeb499936a08fd5849b68ccc59a04bb47e2ccf81ea8aa9479c402ebbc0c3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x103, 0x3, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x2e, 0x91, "e883f0d864af0da9c632153ee929e76bf3f6ed9e46773cafb4fbe4aab1c7eb9bdf06a2de7bc3bd280af7"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c3, 0x80, [@ibss={0x6, 0x2, 0x3ff}, @preq={0x82, 0x51, @not_ext={{0x1, 0x0, 0x1}, 0x0, 0x7, 0x2, @device_a, 0x2, "", 0x6, 0x101, 0x5, [{{0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_b, 0x10000}, {{0x1}, @device_a, 0x7}, {{}, @device_b, 0x1}]}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x1, 0x0, {0x7fff, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x7ff, 0x1f}}, @chsw_timing={0x68, 0x4, {0x2, 0x4}}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @perr={0x84, 0x10e, {0x50, 0x10, [@ext={{}, @device_a, 0x4, @device_b, 0x3f}, @not_ext={{}, @device_b, 0x8, "", 0x2c}, @ext={{}, @device_a, 0x80000000, @device_a, 0x23}, @ext={{}, @device_a, 0x7b, @device_b, 0x26}, @ext={{}, @device_b, 0x935, @broadcast, 0x39}, @ext={{}, @device_a, 0x0, @broadcast, 0x32}, @ext={{}, @device_b, 0x9, @device_a, 0xa}, @ext={{}, @broadcast, 0x4, @device_a, 0x22}, @not_ext={{}, @device_b, 0x7fffffff, "", 0xe}, @not_ext={{}, @device_a, 0x80000000, "", 0xc}, @not_ext={{}, @broadcast, 0x7690, "", 0x12}, @ext={{}, @device_b, 0x80000001, @device_b, 0x2}, @ext={{}, @device_b, 0x8, @device_b, 0x2a}, @not_ext={{}, @device_a, 0xb88, "", 0x6}, @ext={{}, @device_b, 0x8, @device_a, 0x11}, @not_ext={{}, @device_b, 0x10000, "", 0x13}]}}, @mic={0x8c, 0x10, {0xb79, "4145f0699722", @short="1c067b80ffd8f18a"}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2c7b, 0x6, 0x101, 0x8358, 0x9, 0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f76}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x1bb8}, 0x1, 0x0, 0x0, 0xc020}, 0x4004840) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:50:35 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xffffffe0}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2930.933355][T29748] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2931.005664][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:35 executing program 1:
rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000740))

[ 2931.195761][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:35 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:35 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000002200"/20], 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82002016}, 0xc, &(0x7f0000000240)={&(0x7f0000002180)={0x1bb8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x1760, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x5, 0x2, 0x0, 0xeb, 0x3, 0x1ff, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xe2f]}, @beacon_params=[@NL80211_ATTR_IE={0x1ab, 0x2a, [@random={0x3, 0xc, "cf673b1ed190601e2cce020b"}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x80}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @random_vendor={0xdd, 0xf2, "bec2d9781fd41c5c6586753e511b1bf2fc3cf1fcd7109906e1895df05e997e79000190e4d44a691dee8877a5b7677a93517dbea4a632853d1f2bc77b27319a7aece12f53bbac0f633d21a8c35f3fd63c59809632f80a979b1faafc6699ad2c5c8311d30b9bc2630613293393b364c510ae1ec75bfce4006cec8464ebd3a00db0bf5d665f436a8cd9ecacb7f9dd0bd75ea7a9bf78af563deaf66582d199adf7d4e888c07b75ac30515aa7e52c6716f7be5f6628fd48f2bbe4b209c39edb68b415777e011279483a404ca38f1ca360db9f681fd6bb83b383797e030901f7962267462e149870c5a49294f03c19723d5d9ec33e"}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x2, @device_b, 0x7fffffff, @device_b, 0x7fffffff, 0x2, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xe, 0xc1}}, @supported_rates={0x1, 0x1, [{0x1}]}, @dsss={0x3, 0x1, 0xd}, @measure_req={0x26, 0x54, {0x9, 0x2, 0x1, "4f470d18d47d37d246cb3885300f5802a978e1143f1abe643454cd24c4b121b492d87086ce515d3290d026c7d14b821a997c6ed665bac9d253141df755059c0000cdd33bccf0fca060680aaa42528416b4"}}, @sec_chan_ofs={0x3e, 0x1}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x50, 0x3, "5df2171c9bc8855ca3a2bb975af4e66724860845a1ecdaf9f497f786f8b483004d8e29938faa224053ce0182db20793e98db96afe897e31e770c2481cda55e5649a56262705cc76e08eec324"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "b2d441e94919e000a3db6fea6a05f8f6d6df3bf6c9bab40774f113888e214c71f729cd54ca190f8877874171f17a7d6869a924adabff3c6963de517d6c37dfc5c0ac1f1ff56fa5d5af46122cae88358224426fb3b0b68d2234bff6113974ec972a9639cecf1972fe439742c384eff2a321eb1f509a24723d4175be2a20a92c79e3a2a2faec3371880373b7cb32a610"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "9492a87d4066a4c057091789a93f1357920119a5b8ec68a86a3e"}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "a48e1ea87432b517365bc25d6b8dea6e12ddbd292209466ebf16c6e59498e661bf2d429f123f4890ddb49b9b9fcd549879f1cb7245f7b912e30da1c1dd0686b5fc3e4431ad768307eebb0bd8edbb2611801d6d4f45cb0f2d2d22b3009914f5e35e0b81d48da3f7a4ebf0117669e614143674527888f45ff3f7eeb5d1d9a73a67693c34faac5e5a9bf73a5c3817e36f7f0749e1f068ce8d84ea7f947f322169dce459ba86a077aa4dc8500ba8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "670c6387ca2f761162e6a744c318ae58685fae5d59c1ee40495d92071ee79c2ee0e4010da62df350307cae"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a6, 0x80, [@tim={0x5, 0x24, {0x8, 0xcb, 0x6, "2c1b9395647c5845660768b4cbff95ff54c6f5dc4ecf87e6e844796b9c05b50e38"}}, @fast_bss_trans={0x37, 0xaf, {0xf8, 0x6, "3ef73a3179d50d3d7504e3f4f3d92d16", "b53d684c9f767aa29131ed6c88034815f071698cbb36deb9834d0159305b4d48", "915ec67048b00c79a4a37595e6b7ea2622baab8791c978e3ac9aaa681c4e1ae5", [{0x4, 0x15, "e828708b43126efbd953a64c99bdb2e1975d1cba22"}, {0x3, 0x12, "94c5a9b8d79dca7f375aa20cd3e1dc509166"}, {0x2, 0x1c, "b6309d5e3530db94498699da6ee8b5b5932cc1d208d30a05c12baaad"}, {0x4, 0x3, "9d9826"}, {0x1, 0x4, "3f101dc7"}, {0x4, 0x7, "f53ba58982c72a"}]}}, @link_id={0x65, 0x12, {@from_mac}}, @random={0x20, 0xa8, "91086a9b78ef311362281b0d97f1e97fc186198da538161995c911139966c411d89df66bfe898581aa560d3e1b0d467fd549b68df92433071241efb1be5bb08e86c7fd8b6527db2001a58e0360756426efc9545ab7c2ea36cec57fdc547700ec074e436ef288a6264baceab1ad2bce80da5de04dde807f1f4095dfe1836f51b32fd8dfd95c48d702e38e0de023a9dd15d816db82d42b0fd7c61e5fd4d6e6f950ca184c4f866bdf63"}, @supported_rates={0x1, 0x8, [{0x6c, 0x1}, {0x12, 0x1}, {0x5}, {0xb, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0xc}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@cf={0x4, 0x6, {0x69, 0x1, 0x4, 0x7fff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x25c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x100, 0x2, "6f89d3f49152971c8755717bd3efe7e3f9ad6aec00b202e0ac2dc7a7703962136bad32e53e8a3a6fc60def46bdaf76836315cc134c0f20996c4193b86faee7ccc5a35acac02fdf75c500b0552a843e610c313761cbb5bccde6079fee15776ef754ff727ecbed082389abd053edfb0de90e9262275ea2085d31d74de9873b3bdc485e8b8f4ed0b34d5b0517befc08b3fb52aa15c86a17790e19f982786697222ced066e3cf6c7edf1d196ded837407fd8ab1ace420dd0d25f8489eb847901693dc0843b9dcd02ae94330528f542e29b6972fb0eff7ff1123a0f188963b685b7aa09b45355633675bb30560a54b4a234bf1cba59a483031a829e8d91b3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc, 0x3, "9415a29212b38884"}, @NL80211_FTM_RESP_ATTR_LCI={0xfe, 0x2, "bf2fba3ce3b4ee3b60e89581999a9a3e7511ce16e2ef74aad6e8d2512a3863c13e43d5332d769564c39a29880030417eeefe8ebc44607249b57ad984a2ee6f6ee5534893e1d9c4a887d999171a3b5cdb58772fc0e74c5f13da2522ac35944cb7ade2f996b1d3ff49123b692b037b82d4e799f88a037ea3adeb3437c34ead2a0531a3154d79859f79cc385a8ebee910013fc09c9e6e916326f8caa6ad47e671800c3ae4efbc150883d1b3194e2aea7058b8857617190fb4606d64ad95628fda8019425867aca4c8cdf407dc0eee93adb4b6c28179dfe2a2f06f6d99e2c7cf797811b8574cf36ce09b0ec57adcd8b3fba741c40a78964b2a88b201"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4a, 0x3, "40b56b20eaa2006e23a62a7c7a0a3ac1fceaccceff8c5e2a5650979de2c30ac0cfa2bfd4ef3fea99d99653eeec0fe635642e34ac8cdc0d4eeb7030346303ff658e7881a4da57"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ba, 0x7f, [@preq={0x82, 0x30, @not_ext={{0x0, 0x1}, 0x4, 0xe1, 0x0, @broadcast, 0x7fff, "", 0xd58, 0x7f, 0x2, [{{}, @device_b, 0x200}, {{0x1, 0x0, 0x1}, @device_a, 0x200}]}}, @ssid={0x0, 0xf, @random="7f7eb9b0dcc438922ea106074a37d4"}, @chsw_timing={0x68, 0x4, {0x0, 0x81}}, @preq={0x82, 0x20, @ext={{0x1, 0x1}, 0x0, 0x8, 0x3, @device_a, 0x0, @device_b, 0x2, 0xa3a0}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x4, 0x1, @broadcast, 0xa31, 0x8001, 0x40400}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0x6, 0x6, 0x6, @device_a, 0x6, @device_a, 0x7e56, 0x6, 0x3, [{{0x1}, @device_b, 0x5}, {{}, @device_a, 0xbc}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0xcf, {0x5, 0xd0, 0x0, "039095e1a45f43f11f4fb04201813f1294a8c070d8a495633709b5b33e396f5045ef51716d8ba879156a83dc0e4bcd97cd0a83cc0cbc18e2a5af535dce591b707d9de2faa49dc6f5f24b2bd8d9be5c2d9985c228a4cebffb6af97df37fea86909f2de7ec6a08a1636fb1631d632f654b3bc89c8eaf432b38272027fec91813bf33e8066fddcc9c22e4ffddeb662b3b505b8a000bca2a6f3e84c92e620136dbddc27b1d9c137fcdcc70eb8fea0009e06abfc3bb8cc811c8f9356804da2f11add80f17fc042df4bfd94378c637"}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ibss={0x6, 0x2, 0x481}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xcf, 0x80, [@challenge={0x10, 0x1, 0x6e}, @perr={0x84, 0x9c, {0x7f, 0xa, [@not_ext={{}, @device_b, 0x4, "", 0x17}, @ext={{}, @device_a, 0x2, @device_b, 0x2d}, @ext={{}, @device_a, 0x4, @device_b, 0x37}, @ext={{}, @device_a, 0xffffffff, @broadcast, 0x19}, @ext={{}, @device_b, 0xff, @device_a, 0x30}, @not_ext={{}, @device_b, 0x6, "", 0x17}, @not_ext={{}, @device_a, 0x8, "", 0x1c}, @not_ext={{}, @broadcast, 0x9, "", 0x31}, @not_ext={{}, @device_b, 0x4a6, "", 0x3}, @not_ext={{}, @broadcast, 0x3c, "", 0x5}]}}, @random={0x4, 0x28, "0b28f6fa2a1423201eeb28c2de3d65190392ffc21985cced9c31f77e1cdc1a47328a21cf117fd1af"}]}, @NL80211_ATTR_BEACON_HEAD={0x332, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x8, 0x902}}, 0x2, @default, 0x4181, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x0, 0x4f6, 0xff}}, @val={0x6, 0x2, 0xad}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xfb, 0x95, 0x66}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0xd2, 0x8}}, @void, [{0xdd, 0xc8, "ff2b1059b263baf5f4388e6c66d086ed9ad15fca2460f3a708a20aa57cc8efc529d022a4f66f747ca22f1d017d3347b96ac98b5ec348ef387d9bc79c00e41c5513517cfc1a5411f0527828a620d6adf2c93136deea434956a308b53721add537f00a9ff4a4a41ad9212d8b04dc10480c1fc8e87e68b151ed72774215b8c7b11424032e21c8ee6d4e8d918364c12f6b6575e8b8bfaad0036d48d886a38ec55136999ffbaa56e509c7bb15f580fe93ae3b63f59ef656f51f371cf1e343939ac6576d4605d7f98f2a00"}, {0xdd, 0x52, "7c37b3a5e52d9013d6b90a4e4c2140a72212e56b3d52e3bc19d4cd28ddfb32e3f1e8e1f5b7975f24bccb15d31c5fcae834cce847fa5803049deba44359ccabcfc609893ed234ea78398d7dd35f1b328bca56"}, {0xdd, 0x98, "fbe0a8a5ab871e1984454f8ee5c98cd38adbbaaaff0abbea1851c1ef6dcfb9482b7864e935d02931cd619d9afef4e8a3c8a60eed6be47170c061b25ea74a49da83d45a2cd815576c77c2f4def9ffea3b51f39c9fb7bd29e6c7be5f8282f9ed62545252094d7930229cfbb8f248076b26c484fb9f33db547e4bf860fe86b3edd271e395773fd2110aeca31c71fda8194856c0762fd9a01d36"}, {0xdd, 0xf1, "46054f25ae121a6319de3f8d666784d29bddabba9b91cf35b0cc82e46055a66afb9605669ee9575f62e56e6527c81e033b17956ca827c612765a1480bc65e1e874c11c916a977985323b3176c0c42bcdce0d9dff0b78c999757da3718e9904a355a2a2350f49f118b78211f98606c3b0f19ae98c9a63aebbe32296a0907d9af14c571568c225da371e47c5a3e36e00ceeb8ee3a50b55589de1edbc316743bb620fe9fecbe8ced8ffc15025d966a94ece192f2d37e4abe39f7e8cccbd5f0f826770a6e9c4130b7498930e2b3acb16e4c0dcb5cab2582cdfb015513db1adbe6497b9d6645c7e77408016f344cba7f7749e80"}, {0xdd, 0x42, "b704a7c280ba8829b512a1da3d1ed3e00952f5b51bd3f37a3e64d4e363574d5b4576fa98cbcb302cffdda9998b628fc0df9fc0f1fe9e39d072f1d80a2b2b026bdb87"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x101, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xdb, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @initial, {0x0, 0xc00}}, @ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x800, @random=0x6, 0x0, @val={0x0, 0x8, @random="9828d0ffd246128c"}, @val={0x1, 0x8, [{0xb}, {0x9}, {0x18}, {0x1b, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x12}, {0x0, 0x1}]}, @val={0x3, 0x1, 0xd}, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0xc5}}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x4, 0x0, {0x2, 0xff, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x8}}, @void, [{0xdd, 0x60, "0fc34f4e1ab5c1d01784434d0c236e873c882e6e14e908f9e026c117e06fe672bbfebfac4027f82639c9eafe5744ad4ea5909522a43107d87eabd54df6bfb76479a87cd234a9dba52e7b254238d3e156c8a8d0742cf6bfaf02b568230dcd371a"}]}}, @NL80211_ATTR_BEACON_HEAD={0xf6, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x94}, @broadcast, @device_b, @from_mac=@device_b, {0xd, 0x245}}, 0xd8b, @default, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x2f, {0xdb, 0xda, 0x8, "0c310f9edc8e47de5624f7a9112e924f7247ef4c2dc6e3b05269a69ab09009d3acc586d0d984819cd3df06fa"}}, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x72, 0x2, 0x1, 0x573d}}, [{0xdd, 0x8b, "6e14d208f2951cd5f975fb5beb67234af57117f9f186806cd933e092ddbc4eb5179ae883a52c9c3c8d4d9ddc8e152d4033d46a3bd51cd0317c758290716b9531d777b8bcc066fc53713b9f0afeb8349dc3b8a90fe7f65543ffc36770d8b430a2182bc02917813f445ada89879837ef508ac32df8f6e8b816f5c4bbdd02116678791d10b186a396c86493f3"}]}}, @NL80211_ATTR_IE={0x40, 0x2a, [@link_id={0x65, 0x12, {@random="0b4c94166233", @broadcast}}, @supported_rates={0x1, 0x2, [{0xb3adbfe0aa55a16c, 0x1}, {0x24}]}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x0, 0x0, {0x8, 0x1d9, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x800, 0x10001, 0xc1}}, @mesh_chsw={0x76, 0x6, {0xf7, 0x5, 0x9, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x428, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="531291eae8b1", {0x9, 0xff}}, 0x8, @default, 0x4, @void, @val={0x1, 0x3, [{0x2, 0x1}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb6}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x1, 0xb6, 0x79}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x94, "15bd76d7251295fc73e07e837d0d7a1c66c4a2cd8dbe8915b8828556d9ca538410bb9705bcf3b8755080c6ea09eb73635c9729dd40cf523bbeb3cbbfe23f418488da92c0bf174a59f9bd075b1192d01f5542b8d6c8ac8c270109eb328e4e5270154db22a1d5d8c8de9a18622219d86eecffc587e6f1d6e6a03b5e6108ce7042137c7b5b492fbab43d081361a1e9bfdf424b3bc2c"}, {0xdd, 0xc3, "dd2afa1abd589888951005868c5cf4594d3f523385d662a23d7571b54d822e04444ebefafeeb3210b28ee2edac4b1b836e69bdf51e24de9b3b9e4b800120f82120db0b4b12bf5e20b7b95f3f50b8fcc1552c36aece4772d71de54fc1f76987385ddcadcba6740c45592493ecef807151d6d4f787f3a90a6c08d92623ef5042224783167646e711017611156fd8949a5300f9c4cf196d3cfd80366b35e6129db8e696bd2e2dd0d2e55eafd8db174cad277f01904741794e6c6a82b929a731740c1904b0"}, {0xdd, 0xb6, "6af720be201569340105a95ae6de93a59b385106fef0ff4c100a743f0cbb4ad7e4eeec080e619989cc86fe3f1a86f7bfc1fd97c4aa59071b3ba2fea491e238e16a4479252ba2e4374b49e8c36283ffe46ecf422c171ecc9d0fb8bc50aa74d70d0837e904804c6d135d173be3a9ac6752fdc3fb9a4066a22a071e5cbe28e1be30c61535ac7e9d88eef530861ec36a6e9ff983be1afbc6c2930d4b8e084534dc90f30b8c847ebb55132a30cabb9e0bb0184a0c111990ab"}, {0xdd, 0xe1, "05f2fbc29ff00c54374bf3a970a459b45ec89642659ac894cca881c40ab3f1dadf9459840c7e891a4999118abc915e4562e473f8d75fe9a35e415a4ece893b2a8b374fde448df2a4258128f9904fb9c7707ff983345a4879875de460eda327bd17be2cdf3db75df81f490d9e03adf304855bf405f7c4364a474a8332eba169db0845b10bd9693601468572566b191f65959bbcacecf3cab18999bcde026b91c4724af1af94114e37dee590de413b2a299ca25ed6cc957594f706e65dffbb8a81c71bf0c9b9384e561ffbc250f4f99ed64befddf443ff5a2eba3ae868ab5da4add3"}, {0xdd, 0xf4, "80c206278f94c4a18822b6ed5a8ae13ccb0b3e323081fd39cc3d84176f7e89b59df6e328fc9bf3063cf74d8c216fb0f0e1c3cea78fd59773ab909d7bd539d4e15524f8e84c8507c015c2afb2300ccb075253f161372fe8d282261896a33f913e9f4c6c2efd82d4473d4ffa8c00602ed7d2ed985eacfea84ce8e192dc0ef39670ca1b6b49f098735339813e7bbd1082fbf9aaf35b7955b54384164aaceb1c192233c8971ba9f7235f49374f915b09d5f94c52b7a36cc93e9cfd9d8d2b7e994c98e7ea5dc2d147b9d147366c976dcd30cf423aad8789e5e380de8d4c359ddcaf1921a4796381001447f688871180063577c079fa4b"}]}}, @NL80211_ATTR_BEACON_HEAD={0x25a, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @random="326faaab3455", {0x2, 0x8}}, @ver_80211n={0x0, 0x80, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8001, @default, 0x400, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x33, 0x1, 0x20}}, @val={0x6, 0x2, 0x3}, @void, @val={0x25, 0x3, {0x1, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0x78, 0x9}}, @val={0x2d, 0x1a, {0x300, 0x2, 0x1, 0x0, {0x9f, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0xb1, 0x40}}, @val={0x76, 0x6, {0x1, 0x1, 0x14, 0x8}}, [{0xdd, 0xee, "9f465a28832d7d01561dad116b0809f039972a8522751c0b2315787eebf57ae1acacc0c7eb147b93d1e09414341d4f77c7d324702feb04919686d1a5411352a98ebd6c2978868c1f037afbbdf9317340b6dd8c29da1ee7e36be4fc6cdd5e6297ed79feec229db33eef4a6877314b8341e311613af681ba071e9da3dbcee1aab17e9473f141e8e79b5e78547d930ae127b3e9b094d894a6187bfaad2286da08fd787e7eeeaab4146f757298b8d2647c3738f0bf992b2a5e62989be70a10fd38aec3a2f3632829835710baa73bf035069e627514e96957888cc30d26f59e7c787b6bceecabc221a2a564edee0c9249"}, {0xdd, 0xed, "43e16aedbbdc5c68b734f748033fe08888123adc870200fca7e8258450f2e13b8ddcf1e58765e2322c8769bc4e772f22a941d5ba7789f5209931ad80359c5a7d48ff12f020316a8778042cf08ec6b67633bc0509c19a161b7a630ef9760eec305bbf6126b7d6813e7f22623ec7b31c10b11ec67bdb02ca2a68d2b71a8187f7e836db5dcabf8b6bd5688b7f8ab0c4ca44e4905c5dc4499849ee484382e7d2ed486f3818283cf2794a966ac5db10100b84d1f8c72a670f29ddb8ee3902f8afeb59250edc029c3631da6acf9cfdc44d019812b9698145b19e5975c07bccdfe9f013c14d6b80a81cb2bcf5da5de497"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x2, @broadcast, 0x0, 0x7fffffff, 0x8000}}]}]]}, @NL80211_ATTR_CSA_IES={0x3f0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xaf, 0xf, [@fast_bss_trans={0x37, 0xa9, {0x7b, 0x4, "d18857c56438379deb7f41e78304a96d", "bb4957bb6213632c173341823acebce000432ed28f9db09b1beb14c1e20ef3c1", "e553a456609929b2f909ae328b83428ea3b82d9eec908d6b48b8ecb43a37403b", [{0x2, 0x25, "33a4a8fec67145525d4c6a7dbf9cda288b9d6955bf486155df1f1b938956d59160aab599b1"}, {0x1, 0x1b, "c7e810fbd3e5114a7a0dd925cb9865909c6458123179b6da267c43"}, {0x1, 0x7, "3b4dcf3bfd508e"}, {0x4, 0x8, "7a2b10736d67c5bf"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x148, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "a1d8756d2dde6f58bbc96adaadb6c53edb60356fbeb499936a08fd5849b68ccc59a04bb47e2ccf81ea8aa9479c402ebbc0c3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x103, 0x3, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x2e, 0x91, "e883f0d864af0da9c632153ee929e76bf3f6ed9e46773cafb4fbe4aab1c7eb9bdf06a2de7bc3bd280af7"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c3, 0x80, [@ibss={0x6, 0x2, 0x3ff}, @preq={0x82, 0x51, @not_ext={{0x1, 0x0, 0x1}, 0x0, 0x7, 0x2, @device_a, 0x2, "", 0x6, 0x101, 0x5, [{{0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_b, 0x10000}, {{0x1}, @device_a, 0x7}, {{}, @device_b, 0x1}]}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x1, 0x0, {0x7fff, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x7ff, 0x1f}}, @chsw_timing={0x68, 0x4, {0x2, 0x4}}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @perr={0x84, 0x10e, {0x50, 0x10, [@ext={{}, @device_a, 0x4, @device_b, 0x3f}, @not_ext={{}, @device_b, 0x8, "", 0x2c}, @ext={{}, @device_a, 0x80000000, @device_a, 0x23}, @ext={{}, @device_a, 0x7b, @device_b, 0x26}, @ext={{}, @device_b, 0x935, @broadcast, 0x39}, @ext={{}, @device_a, 0x0, @broadcast, 0x32}, @ext={{}, @device_b, 0x9, @device_a, 0xa}, @ext={{}, @broadcast, 0x4, @device_a, 0x22}, @not_ext={{}, @device_b, 0x7fffffff, "", 0xe}, @not_ext={{}, @device_a, 0x80000000, "", 0xc}, @not_ext={{}, @broadcast, 0x7690, "", 0x12}, @ext={{}, @device_b, 0x80000001, @device_b, 0x2}, @ext={{}, @device_b, 0x8, @device_b, 0x2a}, @not_ext={{}, @device_a, 0xb88, "", 0x6}, @ext={{}, @device_b, 0x8, @device_a, 0x11}, @not_ext={{}, @device_b, 0x10000, "", 0x13}]}}, @mic={0x8c, 0x10, {0xb79, "4145f0699722", @short="1c067b80ffd8f18a"}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]]}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2c7b, 0x6, 0x101, 0x8358, 0x9, 0x8]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f76}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x1bb8}, 0x1, 0x0, 0x0, 0xc020}, 0x4004840)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2931.448339][T29760] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:35 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x1821)

16:50:35 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1465c347d3a0d1bd00"/27], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="f100000000000006b3478269c08cc71710ceb193a6ee12f7eeda95695cfd5470ed1c0f42e6d4dfe40190682ab8d89d00c3723659f05e7650fc4d380baa7c8f65452a355d1cd06fe41fd6815d7c1a9543a2807b948b5ab88354e1d8c226d48d64f98af2e6bd4f4ec7e018804284d0edc83a0249bd29ac553a"], 0x1c}}, 0x0)

[ 2931.797651][T29766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:36 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2, 0xffffffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2931.945716][T29769] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:36 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:36 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x31}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:36 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040))
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x1a3041)
recvmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0x80, &(0x7f0000000200)}, 0x40000001)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r0, 0x4, 0x1, 0x2c000000, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40)
openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x40100, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000400), 0x4)
syz_open_dev$dri(&(0x7f0000000440), 0x81, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000002640)={0x35, 0x3, 0x0, {0x5, 0x14, 0x0, '/dev/dri/renderD128\x00'}}, 0x35)
openat$cuse(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0)

[ 2932.412357][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2932.439432][T29780] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:36 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x2118)

16:50:36 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) (rerun: 32)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1465c347d3a0d1bd00"/27], 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="f100000000000006b3478269c08cc71710ceb193a6ee12f7eeda95695cfd5470ed1c0f42e6d4dfe40190682ab8d89d00c3723659f05e7650fc4d380baa7c8f65452a355d1cd06fe41fd6815d7c1a9543a2807b948b5ab88354e1d8c226d48d64f98af2e6bd4f4ec7e018804284d0edc83a0249bd29ac553a"], 0x1c}}, 0x0)

[ 2932.915348][T29789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:37 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x32}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:37 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2933.418381][T29796] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2933.508448][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2933.543002][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:37 executing program 1:
io_setup(0x5b, &(0x7f0000000280)=<r0=>0x0)
io_getevents(r0, 0x0, 0x0, 0x0, 0x0)

16:50:37 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:37 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x2312)

16:50:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1465c347d3a0d1bd00"/27], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="f100000000000006b3478269c08cc71710ceb193a6ee12f7eeda95695cfd5470ed1c0f42e6d4dfe40190682ab8d89d00c3723659f05e7650fc4d380baa7c8f65452a355d1cd06fe41fd6815d7c1a9543a2807b948b5ab88354e1d8c226d48d64f98af2e6bd4f4ec7e018804284d0edc83a0249bd29ac553a"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
dup(r2) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1465c347d3a0d1bd00"/27], 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="f100000000000006b3478269c08cc71710ceb193a6ee12f7eeda95695cfd5470ed1c0f42e6d4dfe40190682ab8d89d00c3723659f05e7650fc4d380baa7c8f65452a355d1cd06fe41fd6815d7c1a9543a2807b948b5ab88354e1d8c226d48d64f98af2e6bd4f4ec7e018804284d0edc83a0249bd29ac553a"], 0x1c}}, 0x0) (async)

16:50:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000640)=ANY=[]})

[ 2934.145069][T29808] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:38 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:38 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x18, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2934.437481][T29810] __nla_validate_parse: 1 callbacks suppressed
[ 2934.437631][T29810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:38 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x34}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2934.493299][T29810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:38 executing program 1:
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, 0x0, 0x0)

[ 2934.689493][T29826] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:38 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x2500)

16:50:39 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8912, &(0x7f0000000180)={'sit0\x00', 0x0})

[ 2935.132807][T29833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:39 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0x0, 0x1}})

16:50:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140d5ce89d0000000000000004000000000004ee"], 0x14}}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="80dd766c0054ba46128a15d8eb209f0ced1635ec5c3f9f396bf6cbdaa5eb1499c4afcee1bb9766d4ec00e1cdbc90f8a46a01b05ff147dfaff27a8bd18d657a08b226f34a2b02b56c9f109b7311c10c4e33a6a80fda2868e30bb68300009b61470975f8d30252bd2221f3b8dec790b75816451f1efd109621e740d80722e8a8a30e299af97a210d2f8fd07fecb85095b2241725"], 0x1c}}, 0x0)

16:50:39 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x2}], 0x1}}], 0x2, 0x0)

[ 2935.505180][T29837] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2935.602450][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:39 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2})

[ 2935.662645][T29839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:39 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:39 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x35}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140d5ce89d0000000000000004000000000004ee"], 0x14}}, 0x0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="80dd766c0054ba46128a15d8eb209f0ced1635ec5c3f9f396bf6cbdaa5eb1499c4afcee1bb9766d4ec00e1cdbc90f8a46a01b05ff147dfaff27a8bd18d657a08b226f34a2b02b56c9f109b7311c10c4e33a6a80fda2868e30bb68300009b61470975f8d30252bd2221f3b8dec790b75816451f1efd109621e740d80722e8a8a30e299af97a210d2f8fd07fecb85095b2241725"], 0x1c}}, 0x0)

16:50:40 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4788)

16:50:40 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000006100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000061c0))

[ 2936.045520][T29852] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2936.181747][T29855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:40 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140d5ce89d0000000000000004000000000004ee"], 0x14}}, 0x0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="80dd766c0054ba46128a15d8eb209f0ced1635ec5c3f9f396bf6cbdaa5eb1499c4afcee1bb9766d4ec00e1cdbc90f8a46a01b05ff147dfaff27a8bd18d657a08b226f34a2b02b56c9f109b7311c10c4e33a6a80fda2868e30bb68300009b61470975f8d30252bd2221f3b8dec790b75816451f1efd109621e740d80722e8a8a30e299af97a210d2f8fd07fecb85095b2241725"], 0x1c}}, 0x0)

16:50:40 executing program 1:
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
dup(r0)
syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0)

[ 2936.564284][T29864] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={<r3=>0x0, 0x6, 0x2, 0x1, 0x1f, 0x2}, &(0x7f00000000c0)=0x14)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x40040)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0xf0bb}, &(0x7f0000000280)=0x8)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4008000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2936.696646][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2936.765524][T29868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:40 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:40 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x3}], 0x1}}], 0x2, 0x0)

16:50:41 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x36}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00')
syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16:50:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={<r3=>0x0, 0x6, 0x2, 0x1, 0x1f, 0x2}, &(0x7f00000000c0)=0x14) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x40040) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0xf0bb}, &(0x7f0000000280)=0x8)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4008000) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

16:50:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4800)

[ 2937.203406][T29874] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2937.333392][T29885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:41 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:41 executing program 1:
io_setup(0x1, &(0x7f0000000140)=<r0=>0x0)
io_destroy(r0)

16:50:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={<r3=>0x0, 0x6, 0x2, 0x1, 0x1f, 0x2}, &(0x7f00000000c0)=0x14)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x40040) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0xf0bb}, &(0x7f0000000280)=0x8)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4008000) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2937.682695][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:41 executing program 1:
io_setup(0x1, &(0x7f0000000140)=<r0=>0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="5ab1c14774bfe9e0663464ac63c02fed", 0x10}])

[ 2937.884967][T29894] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4888)

16:50:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r5, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={<r8=>0x0, @empty, @remote}, &(0x7f00000003c0)=0xc)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3253cdcd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc3f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x301400, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0xffffffffffffff70}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = dup(r11)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r12, 0x80044dfd, &(0x7f0000000a00))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)=@bridge_getneigh={0x31c, 0x1e, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r13, 0x10100, 0x1000}, [@IFLA_MASTER={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x288, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xdad, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf2, 0x145, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x1ff}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x20000, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xbc25, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x65d, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x208, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9, 0xfff}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x21f}}, {0x14, 0x1, {0x6, 0x801, 0x7ff, 0x8100}}, {0x14, 0x1, {0x4, 0xd00, 0x3ff, 0x88a8}}, {0x14, 0x1, {0xfffd, 0x92, 0x9, 0x88a8}}, {0x14, 0x1, {0x2, 0x91, 0x0, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8000, 0x8}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x800, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x800, 0xfffffff7}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x6cb, 0x6, 0x8100}}, {0x14, 0x1, {0xcb, 0x2cd, 0xf, 0x8100}}, {0x14, 0x1, {0x7, 0x539, 0xb2, 0x88a8}}, {0x14, 0x1, {0x20, 0xf6a, 0x10000, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @random="c9ed7ca02415"}}, @IFLA_VF_RATE={0x10, 0x6, {0x9b, 0xffffffff, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3f, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x9baa}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa65, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x51962e03, 0xffb, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1ff, 0x7f}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x6}}]}]}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c0110e09bea971ab77a33362d642e901"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "75678b0401c2d126a8d8f2ecee59cf34"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'batadv\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, 0x31c}}, 0x800)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0)

16:50:42 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x4}], 0x1}}], 0x2, 0x0)

16:50:42 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:42 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x37}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)

[ 2938.558868][T29908] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:42 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

16:50:42 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x0, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:43 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4c00)

[ 2938.949694][T29921] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

16:50:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r5, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @remote}, &(0x7f00000003c0)=0xc) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={<r8=>0x0, @empty, @remote}, &(0x7f00000003c0)=0xc)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3253cdcd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc3f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x301400, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0xffffffffffffff70}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = dup(r11)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r12, 0x80044dfd, &(0x7f0000000a00)) (async)
ioctl$SOUND_MIXER_READ_RECMASK(r12, 0x80044dfd, &(0x7f0000000a00))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)=@bridge_getneigh={0x31c, 0x1e, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r13, 0x10100, 0x1000}, [@IFLA_MASTER={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x288, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xdad, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf2, 0x145, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x1ff}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x20000, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xbc25, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x65d, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x208, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9, 0xfff}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x21f}}, {0x14, 0x1, {0x6, 0x801, 0x7ff, 0x8100}}, {0x14, 0x1, {0x4, 0xd00, 0x3ff, 0x88a8}}, {0x14, 0x1, {0xfffd, 0x92, 0x9, 0x88a8}}, {0x14, 0x1, {0x2, 0x91, 0x0, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8000, 0x8}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x800, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x800, 0xfffffff7}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x6cb, 0x6, 0x8100}}, {0x14, 0x1, {0xcb, 0x2cd, 0xf, 0x8100}}, {0x14, 0x1, {0x7, 0x539, 0xb2, 0x88a8}}, {0x14, 0x1, {0x20, 0xf6a, 0x10000, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @random="c9ed7ca02415"}}, @IFLA_VF_RATE={0x10, 0x6, {0x9b, 0xffffffff, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3f, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x9baa}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa65, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x51962e03, 0xffb, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1ff, 0x7f}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x6}}]}]}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c0110e09bea971ab77a33362d642e901"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "75678b0401c2d126a8d8f2ecee59cf34"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'batadv\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, 0x31c}}, 0x800)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0)

16:50:43 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x0, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:43 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x5}], 0x1}}], 0x2, 0x0)

16:50:43 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x38}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2939.440085][T29930] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2939.647935][T29931] __nla_validate_parse: 5 callbacks suppressed
[ 2939.648003][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2939.674607][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:43 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x0, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:44 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_create(0xd6)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
fdatasync(0xffffffffffffffff)
get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0x18)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x57, 0x4, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000000)={0x1fe, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x0, 0xf6a7}, &(0x7f0000000140)={0x0, r2+30000000}, 0x0)

16:50:44 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x5865)

16:50:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r5, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={<r8=>0x0, @empty, @remote}, &(0x7f00000003c0)=0xc)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3253cdcd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc3f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x301400, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0xffffffffffffff70}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = dup(r11)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async)
ioctl$SOUND_MIXER_READ_RECMASK(r12, 0x80044dfd, &(0x7f0000000a00)) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)=@bridge_getneigh={0x31c, 0x1e, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r13, 0x10100, 0x1000}, [@IFLA_MASTER={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x288, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xdad, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf2, 0x145, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x1ff}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x20000, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xbc25, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x65d, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x208, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9, 0xfff}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x21f}}, {0x14, 0x1, {0x6, 0x801, 0x7ff, 0x8100}}, {0x14, 0x1, {0x4, 0xd00, 0x3ff, 0x88a8}}, {0x14, 0x1, {0xfffd, 0x92, 0x9, 0x88a8}}, {0x14, 0x1, {0x2, 0x91, 0x0, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8000, 0x8}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x800, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x800, 0xfffffff7}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x6cb, 0x6, 0x8100}}, {0x14, 0x1, {0xcb, 0x2cd, 0xf, 0x8100}}, {0x14, 0x1, {0x7, 0x539, 0xb2, 0x88a8}}, {0x14, 0x1, {0x20, 0xf6a, 0x10000, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @random="c9ed7ca02415"}}, @IFLA_VF_RATE={0x10, 0x6, {0x9b, 0xffffffff, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3f, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x9baa}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa65, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x51962e03, 0xffb, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1ff, 0x7f}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x6}}]}]}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c0110e09bea971ab77a33362d642e901"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "75678b0401c2d126a8d8f2ecee59cf34"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'batadv\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, 0x31c}}, 0x800) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0)

[ 2940.075530][T29949] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2940.174056][T29953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:44 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2940.524268][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:44 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x6}], 0x1}}], 0x2, 0x0)

16:50:44 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local}})

[ 2940.786651][T29965] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:44 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xaa}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:45 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6000)

16:50:45 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:45 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x7}], 0x1}}], 0x2, 0x0)

16:50:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20, 0x4000}, 0x4000084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8101)
r5 = syz_open_dev$evdev(&(0x7f00000004c0), 0xb5d, 0x2140)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x1000, 0x5, {<r10=>0xffffffffffffffff}, {0xee00}, 0x2, 0x71})
read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
r12 = socket(0x10, 0x400000000080803, 0x0)
r13 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r14=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x3b, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r14}]}, 0x24}}, 0x0)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=<r15=>0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r15, 0x100)
sendmsg$unix(r12, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}], 0x20, 0x4000}, 0x4000084)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, <r16=>0xee01}}, './file0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000005c0)={0x1010, 0x11, 0x4, 0x70bd27, 0x25dfdbfc, "", [@generic="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"]}, 0x1010}, {&(0x7f0000000280)={0x12c, 0x3c, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@generic="dc11d067d160b4702fcc536490c9fcb736452955d43400c3b425260c47042dfc5dc02180f5902922ed1e601eb04d51889fa5d6efb00c69c01e228d00b124ea52cf16bd74880922a647332f11b062a04cf72b099bd7a006853e5592", @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x97, 0x57, 0x0, 0x1, [@generic="6dcc45c6951514605af9bf5c9b2dd873fd1c4e62a06ee170f5c1c7694146e6268fc84d7c85e0ad1d45d0fda30e155adefbcfc6ee3165479b5f368590924b146b5d7476105c08676e7e43aa16b714ebea0f33a06038278d6b97da2bb4190c58f38940ba62755af71b083f74b746e5346337b119b6a7a423df75743857a6fc137ed4df9ffb817c9e6695a69ba4b478c468efe073"]}, @generic="8dd4e1393fa36ad0"]}, 0x12c}], 0x2, &(0x7f0000003680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r3, r0, r4, r0, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r5, r6, r7, r8, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0x148, 0x4080}, 0x4001)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r17}]}, 0x1c}}, 0x0)

[ 2941.108813][T29973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2941.410631][T29980] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2941.426602][T29980] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2941.428503][T29977] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20, 0x4000}, 0x4000084) (rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8101) (async)
r5 = syz_open_dev$evdev(&(0x7f00000004c0), 0xb5d, 0x2140) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x1000, 0x5, {<r10=>0xffffffffffffffff}, {0xee00}, 0x2, 0x71}) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
r12 = socket(0x10, 0x400000000080803, 0x0) (async)
r13 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r14=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x3b, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r14}]}, 0x24}}, 0x0) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=<r15=>0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r15, 0x100)
sendmsg$unix(r12, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}], 0x20, 0x4000}, 0x4000084) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, <r16=>0xee01}}, './file0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000005c0)={0x1010, 0x11, 0x4, 0x70bd27, 0x25dfdbfc, "", [@generic="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"]}, 0x1010}, {&(0x7f0000000280)={0x12c, 0x3c, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@generic="dc11d067d160b4702fcc536490c9fcb736452955d43400c3b425260c47042dfc5dc02180f5902922ed1e601eb04d51889fa5d6efb00c69c01e228d00b124ea52cf16bd74880922a647332f11b062a04cf72b099bd7a006853e5592", @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x97, 0x57, 0x0, 0x1, [@generic="6dcc45c6951514605af9bf5c9b2dd873fd1c4e62a06ee170f5c1c7694146e6268fc84d7c85e0ad1d45d0fda30e155adefbcfc6ee3165479b5f368590924b146b5d7476105c08676e7e43aa16b714ebea0f33a06038278d6b97da2bb4190c58f38940ba62755af71b083f74b746e5346337b119b6a7a423df75743857a6fc137ed4df9ffb817c9e6695a69ba4b478c468efe073"]}, @generic="8dd4e1393fa36ad0"]}, 0x12c}], 0x2, &(0x7f0000003680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r3, r0, r4, r0, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r5, r6, r7, r8, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0x148, 0x4080}, 0x4001) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r17}]}, 0x1c}}, 0x0)

[ 2941.555684][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:45 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2941.606020][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:45 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x60ff)

[ 2941.917661][T29989] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:46 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x300}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2942.069730][T29995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:46 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20, 0x4000}, 0x4000084)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8101)
syz_open_dev$evdev(&(0x7f00000004c0), 0xb5d, 0x2140) (async)
r5 = syz_open_dev$evdev(&(0x7f00000004c0), 0xb5d, 0x2140)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x1000, 0x5, {<r10=>0xffffffffffffffff}, {0xee00}, 0x2, 0x71})
read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
r12 = socket(0x10, 0x400000000080803, 0x0)
r13 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r14=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x3b, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r14}]}, 0x24}}, 0x0)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) (async)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=<r15=>0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, r15, 0x100)
sendmsg$unix(r12, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}], 0x20, 0x4000}, 0x4000084) (async)
sendmsg$unix(r12, &(0x7f00000004c0)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000380)="46e4c6182abfe48d404c023e17aa0b861f63c63d74c02037446c9cfa9761d67dc7ac5610cf46ae5c746147d5e72f87661a33e03b6bf309c8f2ecdbd8e79cd5b6bb4267d6203a4312cdeb683c6acb61d0da8168572250d9faa3b1ba33a0dcf90fc1030b1ebb9e0d02", 0x68}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}], 0x20, 0x4000}, 0x4000084)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, <r16=>0xee01}}, './file0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000005c0)={0x1010, 0x11, 0x4, 0x70bd27, 0x25dfdbfc, "", [@generic="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"]}, 0x1010}, {&(0x7f0000000280)={0x12c, 0x3c, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@generic="dc11d067d160b4702fcc536490c9fcb736452955d43400c3b425260c47042dfc5dc02180f5902922ed1e601eb04d51889fa5d6efb00c69c01e228d00b124ea52cf16bd74880922a647332f11b062a04cf72b099bd7a006853e5592", @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x97, 0x57, 0x0, 0x1, [@generic="6dcc45c6951514605af9bf5c9b2dd873fd1c4e62a06ee170f5c1c7694146e6268fc84d7c85e0ad1d45d0fda30e155adefbcfc6ee3165479b5f368590924b146b5d7476105c08676e7e43aa16b714ebea0f33a06038278d6b97da2bb4190c58f38940ba62755af71b083f74b746e5346337b119b6a7a423df75743857a6fc137ed4df9ffb817c9e6695a69ba4b478c468efe073"]}, @generic="8dd4e1393fa36ad0"]}, 0x12c}], 0x2, &(0x7f0000003680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r3, r0, r4, r0, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r5, r6, r7, r8, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0x148, 0x4080}, 0x4001)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r17}]}, 0x1c}}, 0x0)

16:50:46 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:46 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x8}], 0x1}}], 0x2, 0x0)

[ 2942.450748][T30002] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2942.478146][T29999] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2942.495399][T29999] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:50:46 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2942.664451][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:47 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6558)

16:50:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2943.046603][T30012] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2943.188974][T30016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:50:47 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x34000}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:47 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x9}], 0x1}}], 0x2, 0x0)

16:50:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:47 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:48 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6800)

16:50:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:50:48 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:48 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6c00)

16:50:48 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:48 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0xa}], 0x1}}], 0x2, 0x0)

16:50:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2944.818481][T30060] __nla_validate_parse: 5 callbacks suppressed
[ 2944.818550][T30060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:49 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140a}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2945.165708][T30067] validate_nla: 2 callbacks suppressed
[ 2945.165776][T30067] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:50:49 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0xb}], 0x1}}], 0x2, 0x0)

[ 2945.286529][T30064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2945.299406][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:49 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:49 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x7400)

16:50:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140b}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:49 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:49 executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/18], 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc)

[ 2945.771850][T30084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:50 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:50 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:50 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2946.102829][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2946.130575][T30091] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2946.195095][T30084] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:50 executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/18], 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/18], 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc)

16:50:50 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0xc}], 0x1}}], 0x2, 0x0)

[ 2946.404871][T30097] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:50 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x7a00)

16:50:50 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:50 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2946.583207][T30102] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 2946.692021][T30108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2946.811210][T30112] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:51 executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240))
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400"/18], 0x14}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc)

16:50:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2947.016129][T30116] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
16:50:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x129002, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x4004001)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req={0x1ff, 0x3, 0x81, 0x5}, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2947.203021][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2947.235870][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:51 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140d}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2947.353046][T30121] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x8100)

16:50:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:51 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:51 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0xd}], 0x1}}], 0x2, 0x0)

16:50:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x129002, 0x0) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x129002, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x4004001)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req={0x1ff, 0x3, 0x81, 0x5}, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

[ 2947.676402][T30131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2947.989031][T30138] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:52 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:52 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x8847)

16:50:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x129002, 0x0) (rerun: 32)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44000}, 0x4004001) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async, rerun: 32)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1583f973bff98364d4fa0180000000000000020000000000f5000000350f29e3617c39bddeea"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (async)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req={0x1ff, 0x3, 0x81, 0x5}, 0x10) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)

16:50:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2948.359466][T30145] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:52 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:52 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140e}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:53 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0xe}], 0x1}}], 0x2, 0x0)

[ 2948.873967][T30157] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:53 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:50:53 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x8848)

16:50:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:53 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2949.877154][T30182] __nla_validate_parse: 5 callbacks suppressed
[ 2949.877226][T30182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:54 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140f}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2949.948027][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:54 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:54 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0xf}], 0x1}}], 0x2, 0x0)

16:50:54 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xe0ffff)

16:50:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x800000, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2950.325543][T30194] validate_nla: 2 callbacks suppressed
[ 2950.325607][T30194] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2950.373226][T30196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:54 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2950.823148][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x800000, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:55 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x1000000)

16:50:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2951.112890][T30206] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2951.164173][T30212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:55 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x10}], 0x1}}], 0x2, 0x0)

16:50:55 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141410}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:55 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2951.614244][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x800000, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2951.694268][T30223] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2951.698246][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:55 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:55 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x2000000)

16:50:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x9, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000006d14e223b512f71667d16eead6add82bbbcd000000000000"], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
socket(0x3, 0x80002, 0x1)

[ 2952.055308][T30230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2952.124960][T30232] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:56 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2952.473845][T30244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2952.499182][T30243] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
16:50:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x11}], 0x1}}], 0x2, 0x0)

[ 2952.536247][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:56 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141411}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2952.583606][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:56 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:56 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x3000000)

16:50:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket(0x9, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000006d14e223b512f71667d16eead6add82bbbcd000000000000"], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
socket(0x3, 0x80002, 0x1)

[ 2952.943999][T30252] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
16:50:57 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2953.227166][T30262] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 2953.282116][T30266] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:57 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)

16:50:57 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x9, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000006d14e223b512f71667d16eead6add82bbbcd000000000000"], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
socket(0x3, 0x80002, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
dup(r2) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x9, 0x3, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000006d14e223b512f71667d16eead6add82bbbcd000000000000"], 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async)
socket(0x3, 0x80002, 0x1) (async)

16:50:57 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)

16:50:57 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x12}], 0x1}}], 0x2, 0x0)

16:50:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x4000000)

16:50:57 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141412}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2953.830845][T30272] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:58 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)

16:50:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2954.458325][T30295] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:50:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000000000000000000200000000"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:50:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x5000000)

16:50:58 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:50:59 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:59 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x13}], 0x1}}], 0x2, 0x0)

16:50:59 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141413}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:50:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000000000000000000200000000"], 0x14}}, 0x0) (async, rerun: 64)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (rerun: 64)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2955.226440][T30310] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2955.257952][T30307] __nla_validate_parse: 7 callbacks suppressed
[ 2955.258025][T30307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:59 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:50:59 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2955.366743][T30312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:50:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6000000)

16:50:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000000000000000000200000000"], 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2955.736452][T30324] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2955.801185][T30328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:00 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:00 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:51:00 executing program 0:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8008}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:51:00 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x14}], 0x1}}], 0x2, 0x0)

[ 2956.179686][T30334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:00 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

[ 2956.238158][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2956.339865][T30337] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:00 executing program 0:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8008}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8008}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

16:51:00 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x6f5d1be)

16:51:00 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

[ 2956.788538][T30353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2956.808420][T30355] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:01 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:01 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

16:51:01 executing program 0:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8008}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8008}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)

[ 2957.275825][T30359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2957.293468][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2957.324469][T30362] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:01 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x15}], 0x1}}], 0x2, 0x0)

16:51:01 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xac1414aa}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:01 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = accept(r0, 0x0, &(0x7f0000000040))
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffeb7)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:51:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x7000000)

16:51:01 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 2957.769130][T30376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2957.901668][T30381] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:02 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

16:51:02 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
r3 = accept(r0, 0x0, &(0x7f0000000040))
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffeb7)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2958.152504][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:02 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffe}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:02 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

16:51:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x8000000)

[ 2958.499843][T30390] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:02 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x16}], 0x1}}], 0x2, 0x0)

16:51:02 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r1, 0x4010ae68, 0x0)

[ 2959.226762][T30405] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x488ae5fffe5d270f}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
accept(r0, 0x0, &(0x7f0000000040)) (async)
r3 = accept(r0, 0x0, &(0x7f0000000040))
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffeb7)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:51:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x9000000)

16:51:03 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:03 executing program 1:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
r2 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18)
sendmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="ff51", 0x2}], 0x1}}], 0x1, 0x0)

16:51:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x17}], 0x1}}], 0x2, 0x0)

[ 2960.025445][T30427] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:04 executing program 1:
syz_emit_ethernet(0x14, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x0, "578d"}}}, 0x0)

16:51:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x34e8}}, './file0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x17c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa849}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0xfffffc00}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private0, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69966485}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x17c}}, 0x8480)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x164, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000000020007000074c00000c1360000004a50b270274ad32c98a20ef536958548fe1042c8e9551b56248398c335d98487c82042ffb7d204000000905a6722b834c4286fd5533ff191265e079eb1d6a40c6589052549f3e603a2e7c75c7a727b30225014552ecb1a394b55ac8b5b88dbbdead536326f4aa459bf568f60ee3d0646642def95bffd66b3422214f36e41d98ee9a2cc3b831c562b80da35db"], 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)

16:51:04 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xa000000)

16:51:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x34e8}}, './file0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x17c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa849}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0xfffffc00}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private0, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69966485}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x17c}}, 0x8480)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x164, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000000020007000074c00000c1360000004a50b270274ad32c98a20ef536958548fe1042c8e9551b56248398c335d98487c82042ffb7d204000000905a6722b834c4286fd5533ff191265e079eb1d6a40c6589052549f3e603a2e7c75c7a727b30225014552ecb1a394b55ac8b5b88dbbdead536326f4aa459bf568f60ee3d0646642def95bffd66b3422214f36e41d98ee9a2cc3b831c562b80da35db"], 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x34e8}}, './file0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5) (async)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x17c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa849}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0xfffffc00}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private0, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69966485}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x17c}}, 0x8480) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x10) (async)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x164, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000000020007000074c00000c1360000004a50b270274ad32c98a20ef536958548fe1042c8e9551b56248398c335d98487c82042ffb7d204000000905a6722b834c4286fd5533ff191265e079eb1d6a40c6589052549f3e603a2e7c75c7a727b30225014552ecb1a394b55ac8b5b88dbbdead536326f4aa459bf568f60ee3d0646642def95bffd66b3422214f36e41d98ee9a2cc3b831c562b80da35db"], 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async)

[ 2960.501728][T30436] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd7000ffdbdf", @ANYRES32=r9, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)

[ 2960.595554][T30438] __nla_validate_parse: 7 callbacks suppressed
[ 2960.595712][T30438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x60dd81fffe8e7f04}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:04 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x18}], 0x1}}], 0x2, 0x0)

16:51:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x34e8}}, './file0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x17c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa849}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0xfffffc00}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private0, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69966485}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x17c}}, 0x8480)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r7 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x164, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000000020007000074c00000c1360000004a50b270274ad32c98a20ef536958548fe1042c8e9551b56248398c335d98487c82042ffb7d204000000905a6722b834c4286fd5533ff191265e079eb1d6a40c6589052549f3e603a2e7c75c7a727b30225014552ecb1a394b55ac8b5b88dbbdead536326f4aa459bf568f60ee3d0646642def95bffd66b3422214f36e41d98ee9a2cc3b831c562b80da35db"], 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x34e8}}, './file0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5) (async)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240040c4}, 0x2) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x17c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa849}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0xfffffc00}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private0, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69966485}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x17c}}, 0x8480) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x10) (async)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x164, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000000020007000074c00000c1360000004a50b270274ad32c98a20ef536958548fe1042c8e9551b56248398c335d98487c82042ffb7d204000000905a6722b834c4286fd5533ff191265e079eb1d6a40c6589052549f3e603a2e7c75c7a727b30225014552ecb1a394b55ac8b5b88dbbdead536326f4aa459bf568f60ee3d0646642def95bffd66b3422214f36e41d98ee9a2cc3b831c562b80da35db"], 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async)

[ 2961.054979][T30449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:05 executing program 1:
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

[ 2961.110998][T30452] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2961.160835][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:05 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xb000000)

[ 2961.536570][T30467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x39fc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008045)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2961.786404][T30466] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2961.870890][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2961.897182][T30470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:06 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x6573b1399e93183d}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x39fc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008045)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

16:51:06 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:06 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/crypto\x00', 0x0, 0x0)
mmap$snddsp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7000009, 0x13, r0, 0x0)

16:51:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x19}], 0x1}}], 0x2, 0x0)

16:51:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xc000000)

16:51:06 executing program 1:
io_setup(0x800, &(0x7f00000002c0)=<r0=>0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/crypto\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

16:51:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x39fc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008045) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

[ 2962.440127][T30482] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2962.479808][T30487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:06 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:51:06 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "b36a7c7315bf83bf2a9b35ab6369e93087b83d11a8c9c4753292b8d37d196b94fa01f97ed4cc55632c64473c0000f87cf8360287e2aea43ca323d407e93c1b238c1524cc7376a3302f2b108c94072cef4179fbf1f36e887960b4c8605df4bb3254313470b75093df343a41b7e2e5be310c"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "9f1719135ec7613969703025bd573799c005d6d85a595f2517e593f33211ddac8aca2258877b2bea53773957d6efc087d063f3f64236bdbb5b569d4338f5a81513d7f432d30fc39c8611e42168381e3ce4ca3550646eff93acf7b9e2eba36725d300405dabe8a74cb7be8ae6308c901aa47bd300cd78f32479bec7b2eae61d421eed5d4987b6b943b77939cd29314862787380b4c2fe37d51e986df08bbc28551b7a3a054a45e2c707b9cc6881258a94638dc7b9b497fe7a07194098efd68f81cbde954e99f2f97629fb857c5a258bc7848d0f51d92f98cf5477b43640"}, @INET_DIAG_REQ_BYTECODE={0xd19, 0x1, "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"}]}, 0xec4}}, 0x20000000)

16:51:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="00a64f02000000004000168fc7f9316ca5f4b0204bcb754e3734a65169bb1c54f286bc54392e0b1a0835762d33b2ddce719b63a51c2813c6a77da5065c4a0e2a3979bf1b05e0f4f8edc6f51591184529f3dca4c7a40206355fffcc2239d7b930e62e9dd2645c75582c421069f87b03fbd826bf12ec6a0ec590ae1be389075c0097e17e059a3beb67a84a3359a40ee8b1947bcc12039cd821a1ff31078e404f7c5c25cedb0d891d6aa484cd5603d048fab5d1ad0617f2001cfb4ea9b865cf6e512a10baaf4fcc043fb0effd8f66e4550e17f86436d12f866fe60e11782cae7d45dc7430e489df77756ae23276824f71332082b319f45d66a37c8db7e5369278d9e4ad97e2de31f3d9424f64da5127b5e6adb299589c7f07e19c38253c76b27c5fd51e7851a5"], 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

[ 2963.056252][T30500] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:07 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x78272efffe1cf2b4}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:07 executing program 1:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0d05640, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74c801a1"}})

[ 2963.114950][T30490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:07 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:07 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1a}], 0x1}}], 0x2, 0x0)

[ 2963.233762][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:07 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)

16:51:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xd000000)

16:51:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

16:51:07 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x4c, 0x13, 0x42f9}, 0x4c}}, 0x0)

[ 2963.634120][T30514] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2963.789155][T30521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:07 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x24008001)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)

16:51:08 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x4c, 0x13, 0x42f9}, 0x4c}}, 0x0)

[ 2964.262910][T30528] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:08 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x78cfd2fffeba9442}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:08 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1b}], 0x1}}], 0x2, 0x0)

16:51:08 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:08 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x4c, 0x13, 0x42f9}, 0x4c}}, 0x0)

16:51:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x24008001) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)

16:51:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xe000000)

[ 2964.863175][T30538] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:09 executing program 1:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x4c, 0x13, 0x42f9}, 0x4c}}, 0x0)

16:51:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x24008001)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x24008001) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) (async)

16:51:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0)

16:51:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0xf000000)

16:51:09 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x7ca2ebfffe4ec6eb}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:09 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20)

[ 2965.617362][T30561] __nla_validate_parse: 5 callbacks suppressed
[ 2965.617434][T30561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2965.634523][T30560] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1c}], 0x1}}], 0x2, 0x0)

16:51:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x200080c1}, 0x8000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)

16:51:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:10 executing program 1:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74c801a1"}})

[ 2966.020239][T30571] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

16:51:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x200080c1}, 0x8000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x200080c1}, 0x8000) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (async)

[ 2966.197427][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2966.241735][T30577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:10 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ppoll(&(0x7f00000000c0)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0)

16:51:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x10000000)

[ 2966.451857][T30580] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:10 executing program 1:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="905d000013000000000000eb00000000000000000000000033c92f6879685666767d00000000000000000000000000000400"/66, @ANYRES32=0x0, @ANYBLOB="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"], 0xec4}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x4c}}, 0x0)

16:51:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2966.671259][T30589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2966.935406][T30591] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x80eddafffe537252}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x200080c1}, 0x8000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (rerun: 32)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x701, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)

16:51:11 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1d}], 0x1}}], 0x2, 0x0)

[ 2967.032793][T30593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:11 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2967.099505][T30592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:11 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x141001)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"78e40a4e6f995d778e296e13bc57e3e6"}}}}, 0xa0)

16:51:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r3, 0x0, 0x78)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100003f700000000000000a7017e0142", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014000100000000000000000002020000", @ANYRES32=r4, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r4], 0x20}}, 0x11000000)

16:51:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1})
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r4, @ANYBLOB="ccfe0e74d9009b8a6a9fc1eb093b220f553a377cc51bf13e394410f494ea03514d7d47eddcff5a89c685df98502c545759e50173980336c0235fb95924a14bf02d09d415060fc114440bf796212fa6e098d240547c5c8c0a193d7c4845f95d9ed2bc7b9505da63e169fe05633ef07dd6d13b9db16e989b2d6db7ff8bbdbee0eb35393d2bec704d299f0ec9dfcd"], 0x1c}}, 0x0)

[ 2967.452194][T30607] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
16:51:11 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2967.716589][T30613] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:11 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x9c, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x33, 0x2, "6f8c008275021d683910c309293188a7c747eb"}, {0x0, 0xa, "442111892705e87a255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec19274"}]}}}}}, 0xd2)

16:51:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1})
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r4, @ANYBLOB="ccfe0e74d9009b8a6a9fc1eb093b220f553a377cc51bf13e394410f494ea03514d7d47eddcff5a89c685df98502c545759e50173980336c0235fb95924a14bf02d09d415060fc114440bf796212fa6e098d240547c5c8c0a193d7c4845f95d9ed2bc7b9505da63e169fe05633ef07dd6d13b9db16e989b2d6db7ff8bbdbee0eb35393d2bec704d299f0ec9dfcd"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000040)) (async)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r4, @ANYBLOB="ccfe0e74d9009b8a6a9fc1eb093b220f553a377cc51bf13e394410f494ea03514d7d47eddcff5a89c685df98502c545759e50173980336c0235fb95924a14bf02d09d415060fc114440bf796212fa6e098d240547c5c8c0a193d7c4845f95d9ed2bc7b9505da63e169fe05633ef07dd6d13b9db16e989b2d6db7ff8bbdbee0eb35393d2bec704d299f0ec9dfcd"], 0x1c}}, 0x0) (async)

[ 2968.024985][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2968.068888][T30616] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[ 2968.079796][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
16:51:12 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1e}], 0x1}}], 0x2, 0x0)

[ 2968.219589][T30624] =====================================================
[ 2968.226917][T30624] BUG: KMSAN: uninit-value in dccp_v6_err+0x426/0x1aa0
[ 2968.234449][T30624]  dccp_v6_err+0x426/0x1aa0
[ 2968.239211][T30624]  icmpv6_notify+0x4c7/0x880
[ 2968.244191][T30624]  icmpv6_rcv+0x19d5/0x30d0
[ 2968.248869][T30624]  ip6_protocol_deliver_rcu+0xda6/0x2a60
[ 2968.254884][T30624]  ip6_input+0x15d/0x430
[ 2968.259332][T30624]  ip6_mc_input+0xa7e/0xc80
[ 2968.264603][T30624]  ip6_rcv_finish+0x5db/0x870
[ 2968.269463][T30624]  ipv6_rcv+0xda/0x390
[ 2968.273807][T30624]  __netif_receive_skb+0x1a6/0x5a0
[ 2968.279176][T30624]  netif_receive_skb+0x58/0x660
[ 2968.284506][T30624]  tun_rx_batched+0x83b/0x920
[ 2968.289399][T30624]  tun_get_user+0x564c/0x6940
[ 2968.294367][T30624]  tun_chr_write_iter+0x3af/0x5d0
[ 2968.299770][T30624]  vfs_write+0x8ef/0x15c0
[ 2968.304421][T30624]  ksys_write+0x20f/0x4c0
[ 2968.308929][T30624]  __x64_sys_write+0x93/0xd0
[ 2968.313805][T30624]  do_syscall_64+0x41/0xc0
[ 2968.318397][T30624]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2968.324602][T30624] 
[ 2968.327012][T30624] Uninit was created at:
[ 2968.331700][T30624]  slab_post_alloc_hook+0x12f/0xb70
[ 2968.337106][T30624]  kmem_cache_alloc_node+0x577/0xa80
[ 2968.342719][T30624]  kmalloc_reserve+0x13d/0x4a0
[ 2968.347788][T30624]  __alloc_skb+0x318/0x740
[ 2968.352484][T30624]  alloc_skb_with_frags+0xc8/0xbd0
[ 2968.357964][T30624]  sock_alloc_send_pskb+0xa80/0xbf0
[ 2968.363468][T30624]  tun_get_user+0x23cf/0x6940
16:51:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1})
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000d00000008000300", @ANYRES32=r4, @ANYBLOB="ccfe0e74d9009b8a6a9fc1eb093b220f553a377cc51bf13e394410f494ea03514d7d47eddcff5a89c685df98502c545759e50173980336c0235fb95924a14bf02d09d415060fc114440bf796212fa6e098d240547c5c8c0a193d7c4845f95d9ed2bc7b9505da63e169fe05633ef07dd6d13b9db16e989b2d6db7ff8bbdbee0eb35393d2bec704d299f0ec9dfcd"], 0x1c}}, 0x0)

16:51:12 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x982ec9fffe1de949}}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)='\r', 0x1}], 0x1}}], 0x2, 0x0)

16:51:12 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x6, 0x4, 0x0, 0x7fffffff, 0xff, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x3ff, 0xc7, 0x7, 0x9}, {0x1, 0x1, 0x5, 0x2}]})
lseek(r2, 0x401, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4, 0x80}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x5, 0x0, 0x800, 0x1]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r5, "0a2674bcc89845e883988d5a3d25d2fa"})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014001d"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="00000000ffffffff000000000b85250666715f70696500000c00028008"], 0x3c}}, 0x0)

[ 2968.368317][T30624]  tun_chr_write_iter+0x3af/0x5d0
[ 2968.373602][T30624]  vfs_write+0x8ef/0x15c0
[ 2968.378204][T30624]  ksys_write+0x20f/0x4c0
[ 2968.382831][T30624]  __x64_sys_write+0x93/0xd0
[ 2968.387700][T30624]  do_syscall_64+0x41/0xc0
[ 2968.392418][T30624]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2968.398521][T30624] 
[ 2968.400946][T30624] CPU: 1 PID: 30624 Comm: syz-executor.1 Not tainted 6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0
[ 2968.411757][T30624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 2968.422104][T30624] =====================================================
[ 2968.429161][T30624] Disabling lock debugging due to kernel taint
[ 2968.435589][T30624] Kernel panic - not syncing: kmsan.panic set ...
[ 2968.442122][T30624] CPU: 1 PID: 30624 Comm: syz-executor.1 Tainted: G    B              6.6.0-rc1-syzkaller-00240-gf0b0d403eabb #0
[ 2968.454204][T30624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 2968.464393][T30624] Call Trace:
[ 2968.467764][T30624]  <TASK>
[ 2968.470781][T30624]  dump_stack_lvl+0x1bf/0x240
[ 2968.475770][T30624]  dump_stack+0x1e/0x20
[ 2968.480089][T30624]  panic+0x4d5/0xc70
[ 2968.484151][T30624]  ? add_taint+0x108/0x1a0
[ 2968.488727][T30624]  kmsan_report+0x2d0/0x2d0
[ 2968.493404][T30624]  ? __msan_warning+0x96/0x110
[ 2968.498323][T30624]  ? dccp_v6_err+0x426/0x1aa0
[ 2968.503149][T30624]  ? icmpv6_notify+0x4c7/0x880
[ 2968.508059][T30624]  ? icmpv6_rcv+0x19d5/0x30d0
[ 2968.512972][T30624]  ? ip6_protocol_deliver_rcu+0xda6/0x2a60
[ 2968.518940][T30624]  ? ip6_input+0x15d/0x430
[ 2968.523504][T30624]  ? ip6_mc_input+0xa7e/0xc80
[ 2968.528420][T30624]  ? ip6_rcv_finish+0x5db/0x870
[ 2968.533684][T30624]  ? ipv6_rcv+0xda/0x390
[ 2968.538078][T30624]  ? __netif_receive_skb+0x1a6/0x5a0
[ 2968.543920][T30624]  ? netif_receive_skb+0x58/0x660
[ 2968.549114][T30624]  ? tun_rx_batched+0x83b/0x920
[ 2968.554117][T30624]  ? tun_get_user+0x564c/0x6940
[ 2968.559168][T30624]  ? tun_chr_write_iter+0x3af/0x5d0
[ 2968.564533][T30624]  ? vfs_write+0x8ef/0x15c0
[ 2968.569481][T30624]  ? ksys_write+0x20f/0x4c0
[ 2968.574158][T30624]  ? __x64_sys_write+0x93/0xd0
[ 2968.579091][T30624]  ? do_syscall_64+0x41/0xc0
[ 2968.583881][T30624]  ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2968.590150][T30624]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 2968.596570][T30624]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2968.602652][T30624]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[ 2968.608669][T30624]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 2968.615090][T30624]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2968.621084][T30624]  __msan_warning+0x96/0x110
[ 2968.625835][T30624]  dccp_v6_err+0x426/0x1aa0
[ 2968.630681][T30624]  ? dccp_v6_rcv+0x2c20/0x2c20
[ 2968.635597][T30624]  icmpv6_notify+0x4c7/0x880
[ 2968.640352][T30624]  icmpv6_rcv+0x19d5/0x30d0
[ 2968.645118][T30624]  ? ipv6_icmp_sysctl_table_size+0x40/0x40
[ 2968.651095][T30624]  ip6_protocol_deliver_rcu+0xda6/0x2a60
[ 2968.656906][T30624]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2968.662932][T30624]  ip6_input+0x15d/0x430
[ 2968.667329][T30624]  ? ip6_input+0x430/0x430
[ 2968.671901][T30624]  ip6_mc_input+0xa7e/0xc80
[ 2968.676573][T30624]  ? ip6_input_finish+0x1a0/0x1a0
[ 2968.681925][T30624]  ip6_rcv_finish+0x5db/0x870
[ 2968.686768][T30624]  ipv6_rcv+0xda/0x390
[ 2968.690980][T30624]  ? net_zcopy_put_abort+0xa0/0xa0
[ 2968.696259][T30624]  __netif_receive_skb+0x1a6/0x5a0
[ 2968.701929][T30624]  ? ip6_rcv_finish+0x870/0x870
[ 2968.706951][T30624]  netif_receive_skb+0x58/0x660
[ 2968.712003][T30624]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2968.718031][T30624]  tun_rx_batched+0x83b/0x920
[ 2968.722901][T30624]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2968.729076][T30624]  tun_get_user+0x564c/0x6940
[ 2968.733909][T30624]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 2968.740337][T30624]  ? __ia32_sys_lseek+0x1e0/0x430
[ 2968.745534][T30624]  ? kmsan_report+0x280/0x2d0
[ 2968.750397][T30624]  tun_chr_write_iter+0x3af/0x5d0
[ 2968.755674][T30624]  ? tun_chr_read_iter+0x670/0x670
[ 2968.760931][T30624]  vfs_write+0x8ef/0x15c0
[ 2968.765460][T30624]  ksys_write+0x20f/0x4c0
[ 2968.769978][T30624]  __x64_sys_write+0x93/0xd0
[ 2968.774743][T30624]  do_syscall_64+0x41/0xc0
[ 2968.779415][T30624]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2968.785591][T30624] RIP: 0033:0x7f199c47cae9
[ 2968.790133][T30624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2968.809921][T30624] RSP: 002b:00007f199d2040c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2968.818668][T30624] RAX: ffffffffffffffda RBX: 00007f199c59c050 RCX: 00007f199c47cae9
[ 2968.826786][T30624] RDX: 00000000000000d2 RSI: 0000000020000240 RDI: 0000000000000003
[ 2968.834964][T30624] RBP: 00007f199c4c847a R08: 0000000000000000 R09: 0000000000000000
[ 2968.843081][T30624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2968.851176][T30624] R13: 000000000000006e R14: 00007f199c59c050 R15: 00007f199c6bfa48
[ 2968.859297][T30624]  </TASK>
[ 2968.862905][T30624] Kernel Offset: disabled
[ 2968.867300][T30624] Rebooting in 86400 seconds..