35df630aea39d1927c7b34ea7b9a0e5c0f5f73afd126559a3c9d5903c913825841d4be854688667611a16b6dd8c1ced786319914bb18dcba2c8e045319ffa1a76d9f66c901161aba61df59cb1a26d77c18dd2786354610646ff3a424118d77e4e38c1deb52a739a48ea00715e42616"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x100, 0xffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1956.490851][ T1094] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1956.520236][ T1094] bond6 (uninitialized): Released all slaves 18:43:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x600000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1956.533864][ T1097] sctp: [Deprecated]: syz-executor.0 (pid 1097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1956.533864][ T1097] Use struct sctp_sack_info instead [ 1956.660604][ T1105] sctp: [Deprecated]: syz-executor.0 (pid 1105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1956.660604][ T1105] Use struct sctp_sack_info instead [ 1956.724885][ T1095] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x800000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x5, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:09 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x14010}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f00000008c0)={0x61c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x63}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1c76}}}]}}]}, 0x61c}}, 0x4000000) 18:43:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x80ffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xb00000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1957.453411][ T1103] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1957.664619][ T1131] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xf0ffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x100, 0xffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r1}, 0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000002c0)={0x8, 'veth0_macvtap\x00', {'bond_slave_0\x00'}, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r6, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002abd7000fbdbdf250500000006001a004e22000006001b004e230000f96363759804fc6ac8806e285f8f1199c6bc2bf897faa699769074df2936e99b61"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x90) r8 = socket(0x10, 0x2, 0x0) ioctl(r8, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000480)={@void, @void, @mpls={[], @ipv4=@udp={{0x12, 0x4, 0x3, 0x8, 0xe4, 0x68, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@cipso={0x86, 0x6, 0x3}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xc8, [@broadcast, @rand_addr=0x8000]}, @rr={0x7, 0xf, 0xea, [@rand_addr=0xfffff476, @loopback, @rand_addr=0x2b]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x28, [@dev={0xac, 0x14, 0x14, 0xe}]}]}}, {0x4e22, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "8200594fcf05469fbaca79f9b296c52d7d23beca1407001cf2c8cc4652ec231d", "40ac0580e51e4e6df5a96945360ae98f7c7f29550c7af72badba6446c25263b1d907149aab5bf6fe63b936cc96089d9f", "0cd6ba200ee23a35de7aae25ba008159d568ee5c152c748aaffda6b0", {"df63fe397fb66fd05e6f839fc108998d", "938387bb713e50b57341345fb9d3a90c"}}}}}}, 0xe4) [ 1958.186612][ T1177] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x7, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1958.239689][ T1183] dccp_invalid_packet: P.Data Offset(9) too large 18:43:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x1000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x2000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x3000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x4000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x5000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1959.409448][ T1197] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1959.629360][ T1240] dccp_invalid_packet: P.Data Offset(9) too large 18:43:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x6000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:13 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r3 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) socketpair(0x22, 0x80000, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000002c0)=0x80000001, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000b470a5c7b8f32543da67af22ffff0127"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x80) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) 18:43:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x9f) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc10}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x4a00}, 0x300) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x0, @empty, 0x4, 0x3, 'ovf\x00', 0x34, 0x1, 0x41}, 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp-reno\x00', 0xb) r3 = socket$inet_sctp(0x2, 0x89658519da2aa16, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x20, 0x7, 0x0, 0x3, 0x9, 0x81, 0x80, 0x3f, 0x6e, 0x5, 0x8, 0x7, 0x7, 0x1}, 0xe) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:43:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x7000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1960.289245][ T1258] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:13 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012807628e7d8bac2017fc71eec0b000100627269646765000005000280053a840000"], 0x44}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 1960.330674][ T3503] tipc: TX() has been purged, node left! [ 1960.349530][ T3503] tipc: TX() has been purged, node left! 18:43:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x48, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1960.401985][ T3503] tipc: TX() has been purged, node left! [ 1960.426411][ T1267] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4 18:43:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x8000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1960.547233][ T1283] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 18:43:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4c, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xa000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1961.228754][ T1293] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1961.252366][ T1298] validate_nla: 1 callbacks suppressed [ 1961.252375][ T1298] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xf000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x8914, &(0x7f00000000c0)="080da4055e0bcfe847a071") sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc6004000e000a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0) 18:43:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x60, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1962.082216][ T1324] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x68, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1962.162949][ T1334] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 1962.233185][ T1335] dccp_invalid_packet: P.Data Offset(9) too large 18:43:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x10000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x11020000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x14010000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x18000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1963.212876][ T1357] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x22020000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:16 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000008) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xfffff004, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e3bd6efb250309000e000300400000ff050005001201", 0x2e}], 0x1}, 0x0) 18:43:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6c, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x8308, 0x80}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1963.777086][ T1418] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000b0605000000000000000000000000000500010006000000100007800c00018008000140ac1414bb091d10b0a4377f5ce500020073797a30000000005791922bcbcb5adf20cdcdcd2e01059b6ab149347e1d3c449ac18055e95040fade3e39f78080fa45940915f6774013f3bed80bc221b1dc4373c77ccd6f90408bd6ae1c1bf7ca7e6989d355d99b686b5dcd938dab4a2a1e5125208b20ca5c0b8e9fb1b679ea892bb471da720ad1cbf60242022f1cad463ac0b1eff1e97b"], 0x38}}, 0x0) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4, 0xffffff13, 0x80000001, 0x80}) 18:43:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x74, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1963.906214][ T1429] dccp_invalid_packet: P.Data Offset(9) too large 18:43:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x2f000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1964.048719][ T1441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 18:43:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x34030000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x3c000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1964.597054][ T1438] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x3f000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1964.655135][ T1441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1964.884857][ T1472] dccp_invalid_packet: P.Data Offset(9) too large 18:43:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x7a, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r3, 0x80}, &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000b67000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x2, 0x0, 0x6, 0x0, 0x1f}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x21, &(0x7f0000000000), 0x4) 18:43:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x30c00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x48000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1965.705029][ T1493] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe000000008500000009000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r1 = accept(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x14, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x9, 0x202, 0x8, 0x1, 0x3, 0x8001, 0x1, r4}, &(0x7f0000000280)=0x20) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @remote}, &(0x7f00000000c0)=0x8) 18:43:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x4c000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1965.888705][ T1508] dccp_invalid_packet: P.Data Offset(9) too large 18:43:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x5e030000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x48000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1966.761140][ T1522] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x61000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/351], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x300, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000026235673d8d36fa1e000107000000020000fdff070000001400000000000a"], 0x1}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x637303b6af3e67d3}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x20044085) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 18:43:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f7}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000800000007298ab242b2babf68a3e990584579d049e001f32e5a77886687fd39c11fa3b5aeb3c32d7081189747751d8ed2f27ec88ccfe319beca593e68d53d2e1d6f4a4d4c3de72811d5225dc93c8f557d4aef609920b7838a3c789e219260854c73c5f41c91f67347b033fddc54cae41812570707da24697c8b83b02cd569cde54c6a403db82f3a5f37bae217eb443c2bebb565163a1649f0988d6b8f0081f95eb110b7b"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x481, &(0x7f00000001c0)=""/195}, 0x48) [ 1967.461080][ T1555] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1967.495468][ T1557] IPVS: ftp: loaded support on port[0] = 21 18:43:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x0, 0x0, 0x5, 0x5, 0x2, 0xe, 0x8, 0x375, 0x38, 0xe4, 0x9, 0x4, 0x20, 0x1, 0x0, 0x0, 0x4}, [{0x5, 0x8, 0x1, 0xfffff97a, 0x7572, 0xe5c, 0x1f, 0xfff}], "393e6b839d2a0fb851a1a3ceca65423447ee6a6897ffe0945b85e910938343d1aaa3182c2f8d60a66227104fbf97511bce8dfadfe592e7ffe2f23839b8ba8ae0e9d24f058925d87032fdb100ada0fec92ff451fc820fec91771c53f3762f8b0025bbc79a2487c72102a6fbf118df0466b2496fe9b31421635d28e24795ab71b6201ad09c234b6ea0eb97c3d2bed9d492e7d95f71ffe34921f94291", [[], [], [], [], [], [], [], [], [], []]}, 0xaf3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:43:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x63000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x500, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1967.572122][ T1563] dccp_invalid_packet: P.Data Offset(9) too large 18:43:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x68000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x6c000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x71000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1968.588464][ T1599] IPVS: ftp: loaded support on port[0] = 21 [ 1968.631223][ T1585] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x73000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffd86, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="700000002400d7afe203100000001fe71475ef9d", @ANYRES32=r1, @ANYBLOB="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"], 0x70}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x1, 0xc813) 18:43:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xa00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1969.658631][ T1676] dccp_invalid_packet: P.Data Offset(9) too large 18:43:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee00"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xa00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x74000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x600, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r5, 0x23f, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24000080) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000d6b795beac7b78b30000014100e8ff09001462726f6164636173742d6c696e6b000000000000f4e04f3d7b26e77fd3b8bbb58a815d88bc813d1184cac49d665be01ee45ed29de9f63d19f49440bd2f5a"], 0x30}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) 18:43:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee00"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) [ 1973.273755][ T3503] tipc: TX() has been purged, node left! [ 1973.309072][ T1721] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1973.317968][ T3503] tipc: TX() has been purged, node left! [ 1973.330779][ T3503] tipc: TX() has been purged, node left! [ 1973.375432][ T1724] dccp_invalid_packet: P.Data Offset(9) too large 18:43:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x799f0800}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1973.428959][ T27] audit: type=1804 audit(1585939406.307:935): pid=1734 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1712/cgroup.controllers" dev="sda1" ino=16017 res=1 18:43:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x700, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x7a000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1973.846825][ T1740] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x85000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf00, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1974.060078][ T1763] dccp_invalid_packet: P.Data Offset(9) too large [ 1974.131880][ T1767] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x13e0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007060158980000000000000000000000050001008f"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:43:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x85ffffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a4, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x888, 0x5e, 0xdd}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x8, 0x9}]}}}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) [ 1974.627732][ T1772] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x2000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1974.814595][ T27] audit: type=1804 audit(1585939407.697:936): pid=1789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1713/cgroup.controllers" dev="sda1" ino=16049 res=1 [ 1974.850495][ T1793] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1974.942882][ T27] audit: type=1804 audit(1585939407.757:937): pid=1791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1713/cgroup.controllers" dev="sda1" ino=16049 res=1 18:43:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x92010000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x3f00, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1975.059216][ T27] audit: type=1804 audit(1585939407.937:938): pid=1798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1345/cgroup.controllers" dev="sda1" ino=15763 res=1 18:43:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x95010000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1975.108557][ T1803] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1975.144752][ T1804] dccp_invalid_packet: P.Data Offset(9) too large 18:43:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a4, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x888, 0x5e, 0xdd}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x8, 0x9}]}}}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) 18:43:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x98010000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:28 executing program 0: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r5, 0x0, r6, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000300)="438ea63b8169f001d4fd53f92dc2eee0185d4d17bc4bc6d653e97fd70a76d787fc0da834e2f1039840b26c8cc51e1a1790d68d1579d920b0b7a66982696452bfc1fa67005e17d7b83cb363aa1a355f877664e96bf7df30466c0dfad04ef5d2509fc20382950c237f6fa4401fe34a275ba2371afef6018c0c3e2b11a1a75575765f803dfdbe7f46858ee38a422ef32571be76925cf928900ff307602fbfbac17dc6881a49cc8b99ec95a349a6282f62ad8526f9dc2a0d3b75b90bd8", 0xbb, 0x400c0b0, 0x0, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'veth1_macvtap\x00', 0x77}) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 1975.523127][ T27] audit: type=1804 audit(1585939408.397:939): pid=1818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1714/cgroup.controllers" dev="sda1" ino=15953 res=1 18:43:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x9cffffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1975.644660][ T27] audit: type=1804 audit(1585939408.507:940): pid=1822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1714/cgroup.controllers" dev="sda1" ino=15953 res=1 18:43:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x9fffffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xc2020000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1976.107168][ T1820] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x4000000, 0xfffffffd, 0x82, 0x830b, 0x3ff}) pwrite64(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x177, 0xfffffffffffffffc) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x20040044) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xd4030000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4800, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000002e00)) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/146, 0x92}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10020, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) accept4$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) sendmsg(r1, &(0x7f0000002380)={&(0x7f0000001ec0)=@ll={0x11, 0xf5, r4, 0x1, 0xf8, 0x6, @local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000002280)="187a2959d358b9d54c57d4460e6829c085b09503e4ebe399be14af408c69d98967e593dfcd80a34dd68f60750bdeddc79405331451bdac6a36e77e8bc37eef9268f9c141e94d8933b74d84a4ebbeaec7ef7cafef34f97a480a8f06cf30c2115637b9d43d461b2c625cdf1c8b6708233a4c5dde846242c8b05bafc23448bc046dd21a141b46374abcff555845edd5a2e8a1f53c92cab04b8a261ac3561fedcc91ef0817bf12db6b980f2d106a2710473bc9a4256e87dd05363eefc70702ed1e4137b09a020ebf92d49b807a5ac0a8486396da387c2739673d22c519dd", 0xdc}, {&(0x7f0000000180)="ca5a3e53972ec99a6777131107c7dae9e6f54d1e62ab52c5bec5cbdffff9a5cd397e7cf51ab3a7b2305f148a6a9e", 0x2e}], 0x2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000140)={0x7, 0x8, 0x101, 0x4}, 0x10) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 18:43:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xe4ffffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1976.702247][ T1892] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1976.759300][ T1902] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 18:43:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xea030000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4c00, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1977.008894][ T1920] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xf6030000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xfc020000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xfe030000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/364], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6800, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xff000000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:31 executing program 5: bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x3f, 0x80, 0x0, 0x491}, {0x44a, 0x1, 0x7f, 0x6}, {0x5, 0x3, 0x6}, {0x9, 0x4, 0x3, 0x3}, {0xf565, 0x4, 0xff, 0x9}, {0x5, 0xfc, 0x8, 0x400}, {0x9461, 0x1, 0xff}]}, 0x10) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x800) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000001d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003240)=[{&(0x7f0000001e00)=""/133, 0x85}, {&(0x7f0000001ec0)=""/124, 0x7c}, {&(0x7f0000001f40)=""/181, 0xb5}, {&(0x7f0000002000)=""/182, 0xb6}, {&(0x7f00000020c0)=""/45, 0x2d}, {&(0x7f0000002100)=""/149, 0x95}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/97, 0x61}], 0x8, &(0x7f00000032c0)=""/42, 0x2a}, 0x101) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003340)={'wg0\x00', r2}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000003380)={0x3, 'syz_tun\x00', {0x3}, 0x4}) shutdown(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000003740)=@xdp, 0x80, &(0x7f0000003b40)=[{&(0x7f00000037c0)=""/57, 0x39}, {&(0x7f0000003800)=""/7, 0x7}, {&(0x7f0000003840)=""/236, 0xec}, {&(0x7f0000003940)=""/47, 0x2f}, {&(0x7f0000003980)=""/106, 0x6a}, {&(0x7f0000003a00)=""/34, 0x22}, {&(0x7f0000003a40)=""/236, 0xec}], 0x7, &(0x7f0000003bc0)=""/154, 0x9a}, 0x7}, {{&(0x7f0000003c80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003d00)=""/222, 0xde}, {&(0x7f0000003e00)=""/116, 0x74}, {&(0x7f0000003e80)}], 0x3}, 0x1}, {{&(0x7f0000003f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003f80)=""/5, 0x5}], 0x1, &(0x7f0000004000)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000005000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000005080)=""/44, 0x2c}], 0x1, &(0x7f0000005100)=""/119, 0x77}, 0x7000000}], 0x4, 0x40000040, &(0x7f0000005280)={0x0, 0x1c9c380}) recvmsg$can_j1939(r5, &(0x7f0000005580)={&(0x7f00000052c0)=@pppol2tpv3, 0x80, &(0x7f0000005480)=[{&(0x7f0000005340)=""/138, 0x8a}, {&(0x7f0000005400)=""/101, 0x65}], 0x2, &(0x7f00000054c0)=""/139, 0x8b}, 0x10000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/net/tun\x00', 0x800, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000005640)={&(0x7f0000005600)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000005680)=r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000056c0)=0x101) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005740)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000005840)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005800)={&(0x7f0000005780)={0x44, r9, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x44}}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000005880)='/dev/ppp\x00', 0x30400, 0x0) 18:43:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x90642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r3 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x80000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032abd7000fbdbdf25020000000800030008000000050005000300f4742b37ac222c28000008000300040000001000a90000060000000900000005000600400000000500050002000000050005000400000014000100fe880000000000000000000000000101"], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x200040d0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4008000) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1, 0x1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x0, 0x0, 0x4000040}, 0x0) connect$netlink(r6, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) write$tun(r0, &(0x7f0000002a80)=ANY=[@ANYBLOB="07030000000400000000602d2ae10f982f0000000000000000000000000000000000ff0200000000000000000000000000010000883e00000200000000006800000000cf00000000000000d114b139165af32091ba890f1143697d60ff6fbf674da1995e0cd4900505f2ceb44dcd98209d1d9947fc396bfb0871e6491313cfe0788a5074e89e8ae3ba8df7e6877d0b40eeec0e362d17eb2f71802bb60ea97b5afc810d37d154e47b044ab80e7238588fbf37dec782b8b1bcc0950173791456959f803d61b05631efbbfccebeafef57bd9563c27ec7e50ddb6718b4a2aca720fd8662c6713d507f08b8ed95622ebebe3a02b97644e240f30423fbaa339c433d6b41f6db7670a5af4b2f172e64c2e5b40b8f6b37c2e64421d0331aff52b9c910ff010000000000000000000000000001000100000100008cb37d4518d6ae13addd271ca39d048ed6d830fc13406236e5b67f4cdad0867dff7a4d544a31a895f0e967a2aa3aaa2195cd11811a8e0c3b78a301b1d4cfcff4a69fac546db9f81707b42c4098b679469efe5b8ee71c8796bb12e3e2641ef40da663e402c962f7e1d9953e53645f6ffda6987db84b9a806c7c2fe0a69d4db3fd314b37410fa0e65c56149bde13bdf89242411dc197eafafd76a07e83f3c8b2ab1261cc7563165e380bc39cc4e88d70b863ce007e716d86092fd1ec17dbd24181a64e2832c8390749f27f8989a94a94b4d69dd3bdb0d396c7d58f7977e1c01cbdfbe7adf07a80af96225cffad1dcbd2c617216bf89b8ae7cd0e4163830acc2f1c954c75448d27a89189f491f6697cededb95de0f0231c57317f610a52fed44ebba11be40e36568950b47c187c86db3eba66e321b5a90d0fa5c4484aca6e66d9c0a89f4a70c0e92a24645a8967d688dccd148d794365ae672f69fef7f42c974d444643dfa5bf842abf60805ccf13d60f93885e9e36eabcaf1297a9343e4f7a3184aedfaed8ab6c2c3af68c4023101aaeb36cf1b285e3a8fef331e619a1d0e271455fda62bade3032f736e19c86f4d912c6bfe24145ffb48a46d695a75752df73f7366e0fef6b7fa4b4211b005d9707894f2b22a825b3d671d99ed7fb8dd3615807ec2e2d92f48f9a197f864c390de23496d1517d4d71b7e15fec544cbaaaeb8981b66fde005c5d09afb21b1ccb9cbe6fdcc4b549fba75499e6e108fd4ae4fedf1bab7798e2a999613a7273652e4ea907ebffdf87250412cdfaf663c74793b440019f1befb121e1cff5e9e6187de46db892200fc2af9ee236fceefcdb1a61c656518091d3911a14c1150d911b9b923126241d773ff2e622bb1076dfcc37a099540f0dd6b3e9689251a0fbfe4cde79f99b3aacc651c061c966b7a7a5def73e14f2df0e54521846203edbc006a75d27b2574a280f44bb684ad766c6ee091ac400a5e9e7b82aa3e40aa8f69563dc14e90cb7c2dd1a8fb3265a89ebec21e301c29dab4b04ba9a6263b8c59a32c7ed3ab60e4acbf49b4809efc47def8c11bafe0a3f02c08d46f79ec6e063cfefed23891834481aa4ec50b7ee506ee36739809f33f89ddd40152aece71235ae9d8b656b92a69479b3b5b97f3549b5406136caebeb46ee6a6603d3acd001a6b3a9ef56f511e512667a57220a138a3c09aedd374d69224a148a4ddf95534fd64673c0f180f344964fb30fae6082f6ae7146417617e3196fe1ecc740028576496f736f8c8e5c5213df54baf22f8b5df6773716e846c9bb4452ba44659c3022b391dc0cff685f159ccfac22e2cc5caccea60b29059f525449a58f6f53246128cf0126266e66ead7d7b57c7017c8dacfc758092c0d10523986e8468bfa3e8cd1c6b526e2ad2325d2b759fe70ab4de74661c48d64ae07db86f0bc115375abc4cef4afe6c3f25784ff1915864c2839e4c694ed16c583cae16b14bb11da5a5fa659cf1298895481fccaff262d6b38d3129be8a6883b6360f86508ed809fe3e6112ad85059e0bd1624f9282200385551fa41b988139644a2b0bbd09be730c6010a70e846b861f9531806e1baf04e032991fba36f2c55c9eecad743756a5f8746422b900facb8b4db4632c277cdeca7c7288a8816696ad354d5f00753e0f3d6e1e1ad3ec66d21fc01c4ae29fde5db53274ccf04ea8dca09db82c1dbf3202cb4b65d76c08fbb18ba203be4856fc9ace69216474b8a129c063b9d8a712bc4894601000000000000005aeecb3322ae984c5b07f2896e5a05daeb3818b2c6ae5189f16d262221cb35c2d6b933d119cc550fdef69c34bb9df0ddb7572ae801ceb3f00c448dbc2a51f2da6cd6992df1d6a18e81ba2f44bb337b8a161fa81604e1c8ce9b8cd8351b6e7575196f4331fc88c9a9d3ab8f1a646114dfc75527b9b669f8d61c325d11a87537205cd7f8d6758837e7b45179534f7f38002c4cb5e322d01b3beb3bc6aa41fb91c05c945f50f62a23debd8ff86bf24576a3a021359d287ba19977c9ce3d3105c05fe439e85682aa03fdea6b1db6eda4a46e66240ec2b34bc471a777231578aa7e4bfc1f18108f03cf8c36ac0be806d031309e39abc672370aae6c0960b6bef99e2a628eb169c5e6b6b8d228a9ba9a2fe14cf315331eee6714357d7ebb84667b5a6d3900d4e75ee8911de59d3bcc2d4bd0d5142a02d860881f7a7106c59e5ae10c56c88e2fdf6471e579cbdc0be5c6565e022ca65d81737cd0df1a5381e56a9ee09fafe9d60215748c15b5e2ed9cc37f1c7d51a05f004350fe746da19f3f0127546b63c66f3c40039132bbe2c74b286ef80101c8ebb4e84fe3978e0e208bebd8d3b9fdf74bdc108d08ef4d86236d327c5ff1b9c29d4cd0950e09f0e86848c5d3028dc7994a589e60d0f293b9825651c8496210a00a843db37104085a53646e4f9ef8876c06c9b3014eed02a21a9341ce746c15d3638e7aee8a16cf623d1a94be850d77d0fc22935eded1d6f691762029cdf3005395044ab8bc989a7f676f28bc2ce310a13e3003c9ba3b814c82a511318435f0fadcc7088b9d477b5b5ecb884505f010f9b072a20d6fb291b8524fb0f6e847f452ff5ba3eeb8b12c0e3e25decc81b8f1f8d980300cc92ce70cdcf03f7078ccd7c79b9db167fe7e82dc040e68f941f336847279cc9960dc6b0ad65adcf1050bc28eaf700af1f39e76489ff19c1a4865d89bf5dc8a89dd6451bd52dcbf6763ead8a60e4fbdd85ca37b25bc3edca8f27860fdf39ad5993ee1b47f02ccaad9b2cae3ef5300c19637ec24f0cb2acc88e8a63908777f0c759b265581aea3e3a74fcb443d4f2899cf3c3a28c94d5b8ed28fd001742459b99dcd48a6c7cd30600b61262eac6d249e34f7569aa534c37be088b12ce8a917af4db6a603b7355414cc2a92071f64f17bc73a62b2a461fb4f907c8155090a6ccad718d3f48644659cba76a42abbbf22a9acbcdcbbf16f11494f214bd6a5bcc5415aa78ad9d5c9d955c01874ce2416c7e7444146aaa291436b9addb2cdacaffa854284e31cbea9315a39cf561d395cd202eb13d1e330a8303ce948cd9af26d14e2f06bbf7a822e6547fb1d750b361c68595b68f7b7d3a2bd7aa00713d4afa823c44aee128568c280bef9254319c0fd37ead30eac8354be03f4ff441690522b940353c9f3cfeb3cf399c58aea6e25bc5fceef0c2934760d9a7cb7614dc3901960b6a1be8ac14c367fd8eec448929fc1f5efc8a7bd300e109203629829bf79050b856f268a101cfb858bc5439852366ce7ca2051bf01571ca4a3b2c5b2fe0de818f3cab43d05cd38a2cac4fd9255b897855b55eee83532a0d82421c7ed7426de5381887d92d24c678f3a1642219e6baa067efef2410a4045f19581a328160c551991a280c2922d47a274f0d0ceaca974b786238aff3f7b8931775f2adf50ceacfedf719da4893580592725313c209a4d11029aa198cdb9a80d31c8b40e6de5b74d752287500494c3e22df36cdfdb6f4d5a8ac2c871ee89772a7a00ec5cc78b39c9d04bb079b759af9bf5f90a07a43fc23686f7f13f3c6edcd80ee12a6385640147e8ac545ee68753cc01dfa23af4d1e0d63912453aaf7d8b1227ca6725458639978e2ea95c3d32dbba6bb52c7b191379c6a2bd5c4b7bdc47c70e736c7da1c9b6795c6547a741affbff4bf37d09ef4d3682e73004dd065229c6755994ff0679125123289d94af036201e48547f599e24b7d8778de18380710e370c3c86f0a4883595434a5f6f93f955abdc013ab487afed0e1cb053267f3299733f17125d7b7153f8f9ef77f8683e026ebed04549b0ff155ab9b4d5995f946c9a8487007e2dd5f8f6baa257b6d9693fdcd4a3d823384ac9e92b66831f295d72f7c0ba5398b8a6ad39d0fa6e53097bbd16349570a96245e3bb5e41c93aa6089ec853dc7a4f91153a526f1b66cc26ad424d32b57369aa2cd5aa251a40b318944cd6c09f276ea9cf5a4212724cba371fe490b4d0e80e643bd236a9ddb2db1fc36cfb9b0ccbdce44a77d1a6bb02b37b7cfe08c995ddba25e298469698e7b1e4f4977b7ac41409a08aeec23a6bac5293dd202b53aa2279ec86e0219cae6cea3c09666637caf076e9eedd0ecae03ef34338d9ba9b35c1ba6772f4e7aa6f4a64d15e3390c827212b93192f19a96090a009f96f35b3183c6de6f3d70947d862db1275c0447b2da787b7a6372de282e20a6fc8880e0ea6a0f738ce4dd8e5deb2fbcb387287f7173538e899e3d401279fa5f3a384c1f4cd951e30042f0f6270fe660bac932318e29a7d842233dad5388a6c82ab9b111b67ae73f4722563fc88983256a7706ed883ac41b51efd4e1ec7d427c2aa1a8a0f56b72c0d9e8cee637f77f67e99913551a9c7849f8a9d50b200c8e6e1b16928660982bc8c4b770fd907a2d740babec991390ddc2b7fce23fa3a61131bdc87502711b4b5759e635127adfe7fe69e06a43b450f9cc1c60e7aed75ffd04002724017e7a021c90f8c81ae865908d48fa7fcb7cfb9b0f1530fde55cf08cb3c14d365649152f2c8a8c615fefb37a219f730f5d2a660c4cf0308a40f0c06099321136301428408a8fa8735bc6f7eaebbd406728b6e0f943a8597557f6e538123353e56e520d45e9931dbbce8c5a7f094645e1ed88d16c3d9172b109f93fd18feda6956941e0b41f35e2c5b7c997ced9fbac1e9f0ff361fa81be5cc59ed78e006444f71ab86845502a0a6e49c8ef81f8e45c943e7824e87e65137458500ab18f0ecfc9aa10ec00c2a1023ff9695cc2728baec1f2104c1d699069b1825135a11f2b776d576e38640919ed96850cfd4863d5c9fafe473e88544ad0d1d2071e000f233483db41fe5c46da9c472b6cfbca9a0bf0d820374d34b2e84ec60dc2657f000000000000000000670db5046f3900c18cf0a12f17c4b1bea9d0b3667c761594cb2e4c0cb0cac543437b6d75780db919763f59212d9c4dae0eb9e730d238f40ff26b343a3e19065548a4106c98fa5e5c45bf20551f7b90872b5a88d33a85fee608f38f90fffda88bc7d3f70fdcda4c9ee6d6240eb97c766dfbd4ec13894b4f191de683c5f9aefcc58c9d1cc9cd4686913db76b948b551aaf3577af8c3a856354969f1af91fa69f0fe532d29a8c679ff1d3e45616579b8893026db0cb28e0b2ca78f35d62f4fd6a9cd5ee6dc0cdafc71f56d550cbe9cd912c3c0712f939922f872b1132efd016634f4c363968a9e49fdd7ca467dd8c781462f1d0606501720a15c2fe09663ca757cc42b9b267d7c900f52bda7436a09bb498c3070ca53a24dd8045cd8afe1ea450724dcafc37a44848cfbd3adcea1a7727ce24127814f9537b9552f1814a82f978dd02b250f42342e3ea75aa3a6a87fc821c1b0fc10efd1ae4aa0289f85d80040de90049c3d3a304f34d540ee83f86906e56b97197fa92bbeb8cb573cf8ba436b208e1982b365a2e30e4cffa425c0330672e6e79e034b969eb89e08a6ed54a4343d7f3ce1cbf39340768c90f843df5013d5b5fe56705121e69bba6b1d8556cd925d0ce6512a8249e411a77a5269afaa50b361a41a395347aa26196a902a5446f4919faa48d4151f46bfc67b54c55904600fb11401ac0652eedd955ef673a9e3e4ee3b3c715f1edbf796152e0793e46cbaaaa8c3294c6a870e0060ec3f18426073668a5e452cba006883b180e8ea18be4ec140155d3b1bcfc4a15896efb99261cd80b453dfed3e674c6c4c3ce26cd88e55c12c066c912af82cf84d9abcdd30a8cd00c654cfa250e6aae0b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfca) 18:43:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xff0f0000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6c00, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040), 0x4) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0', [{}, {0x20, 'syzkaller\x00'}], 0xa, "332b762c06e470ee28721afe747fb1bbb61ad081a5765333013e73ad360c11371b0915d469cfcca125d886cecbc5cad2e7d1b8730fcdd4bc429d1ec6fe789599e8f1a16da91b525b2ee18ae0dcbc4bafc65392aaa270c41359d352a054ffe912df6497d75db0434259c66328a88ad9d65e5c81ef"}, 0x8b) close(r2) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000003000007066002400028008000500"/28, @ANYRES32=r4, @ANYBLOB="18000200000000000000000000000000000000000000000004000600"], 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) splice(r0, 0x0, r6, 0x0, 0x4ffe7, 0xa) [ 1978.344826][ T1972] dccp_invalid_packet: P.Data Offset(9) too large 18:43:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xff2f0000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffff8000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xfffff000}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1978.991327][ T1990] validate_nla: 3 callbacks suppressed [ 1978.991339][ T1990] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff85}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1979.299187][ T2021] dccp_invalid_packet: P.Data Offset(9) too large 18:43:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x7400, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a000100070000000900000000000000", 0x9e) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x800b, 0x9, 0xffffffc4}, &(0x7f0000000040)=0x10) 18:43:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff9c}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r1, &(0x7f0000000240), 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x100000421) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000005c0)=@setlink={0x40, 0x13, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_bridge\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x5}]}]}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000017c0)={r7}, 0xb) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000ea", @ANYRES16=r4, @ANYBLOB="000227bd7000ffdbdf253100000008005200", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 18:43:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff9f}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:32 executing program 5: r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@none, 0x7, 0x6, 0x9, 0x800, 0x1000, "6c7786f477352b7fdd442eb79c471aa98e725305fdbda55c1e97b678f5161de04bc59149782bd6bb227cb294dd5e201b180a8d37df44d3bcefeea8b9cb19e3672b267613ecdce018fe6cba980c38127d29ec19b2807e7f157f8ff955f37656c9e53adc65d51f1ef9aed27d9a7da1bf0dc559a02911aa678d2ea218ca3b60e631"}) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x10, 0xc, 0x8, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1980.013438][ T2045] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffe4}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x7a00, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574800000000018000200140001000000000001afe11fbf9831b1e73c4bdd3a7ef7687654299b280726fc15daba606fb231d6aa207b0aa8f9b55290e23ffce8bb9828d69e8c268bd1c54ca76ca457", @ANYRES32=0x0, @ANYBLOB="0000b200001f000082463c685baf13b7fb7e5d00e634c06fe89fa7b717ed1c5cf37899319e689583aac4713a32d189cf3749506cbb1d3fdf86988f5d1538faedd0443f2e34682c22a534"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000e000000000000000800020004000300"/32], 0x38}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2c}, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x20, 0xa0, 0x0, r2}, {0x0, 0x1ff, 0x7f6, 0x3, 0x1000, 0x4, 0xfa3d, 0x3}, {0x6, 0x5, 0x9}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d2, 0xab}, 0xa, @in6=@local, 0x0, 0x1, 0x3, 0x4, 0x9, 0x10001}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan0\x00', r2}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48002}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000280)=""/255, 0xff, 0x0, &(0x7f0000000380)={0x9, @null=' \x00'}, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r5, r0, 0x0, 0x7fffffff) splice(0xffffffffffffffff, &(0x7f0000000180), r1, &(0x7f0000000240)=0x8, 0x200, 0x0) sendfile(r5, r0, 0x0, 0x4000002) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 1980.191443][ T2054] dccp_invalid_packet: P.Data Offset(9) too large [ 1980.863920][ T2071] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000005", @ANYRES16=r2, @ANYBLOB="000200000000000000000200000006000600000000000c000300000000000000000008000800040000000600060004000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18:43:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xe013, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:34 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000380)=0x80) accept$nfc_llcp(r1, 0x0, &(0x7f00000003c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev={0xac, 0x14, 0x14, 0x32}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e22, @empty}}) 18:43:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x10}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574800000000018000200140001000000000001afe11fbf9831b1e73c4bdd3a7ef7687654299b280726fc15daba606fb231d6aa207b0aa8f9b55290e23ffce8bb9828d69e8c268bd1c54ca76ca457", @ANYRES32=0x0, @ANYBLOB="0000b200001f000082463c685baf13b7fb7e5d00e634c06fe89fa7b717ed1c5cf37899319e689583aac4713a32d189cf3749506cbb1d3fdf86988f5d1538faedd0443f2e34682c22a534"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000e000000000000000800020004000300"/32], 0x38}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x2c}, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x20, 0xa0, 0x0, r2}, {0x0, 0x1ff, 0x7f6, 0x3, 0x1000, 0x4, 0xfa3d, 0x3}, {0x6, 0x5, 0x9}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d2, 0xab}, 0xa, @in6=@local, 0x0, 0x1, 0x3, 0x4, 0x9, 0x10001}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan0\x00', r2}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48002}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000280)=""/255, 0xff, 0x0, &(0x7f0000000380)={0x9, @null=' \x00'}, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r5, r0, 0x0, 0x7fffffff) splice(0xffffffffffffffff, &(0x7f0000000180), r1, &(0x7f0000000240)=0x8, 0x200, 0x0) sendfile(r5, r0, 0x0, 0x4000002) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 1981.553289][ T2116] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x2}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x3}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x4}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:35 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000744d9b435a33645dc6c37d38b980c926d85eb29516c79cb63b1b3ecde81b164c367d1cec8896ca36d91d0dbbf3603efe5ce7e2bca9710191b5fc38dae61ac238044546070a8b040875f950edd73273ec4f5922c8691eb70731992dd8f56e4f3b89f346e4b2b98a1203a5e03ccb244e35ebee361f8795369a6301ef5ee321de2baf8eb2f7e1303aee62629680b385b9da040e1584b70952a9c0049e92ef12208eaeff95bf540de96127987075c6e9f59b93ca26744b0148e684b63225ba4254f34187e52a1fc06212896276", @ANYRES16=r4, @ANYBLOB="0f0000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="fe1265e33d3faab377e03d631b4aca4c199a169ea596bf85988e775b543487739a9c74a719551379d9a46600080000000000000000000027d8eb2515da08000000000000004025476a3d63052ac5df325f537df6f1d42a54ad31aa3f1538923e322b59758a8f90fd3b2e5542df3bb185546f26598d7f"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x5, 0x7, 0x6f, "b2417f374fcdd289a7026e3745c7f6155624c2f5595c39e45e49872c8ca3580b840a86b51731d92aaa5c9f8bbc4c718d6807819821e4bb80ddd6fece65a0cf", 0xb}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000c44c3c7e0cc3d3a2c80a8971325800108dbbfd1a1832e39d4f7984000104006f5742c8", @ANYRES32=r9, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00%\x00', @ANYRES32=r9, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bd29b805834058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="6ed1d11801c6ee0b4ff4ac96e9bc71ebe6aea9bfb43011fb78f2d19d05c6fb799f84db5284fd06a5ead95f1cb3779458b26a402556697df436356c3e166ff117140a85e619ac4f2ce91265c6a5f17cb9be9c16881230879a2bd55edd168f3aca218a0945b064e05ae44fa9d50fbdcc2724bec734d9779d5a41cf3ea15acd07c01b9c98833bb9064d2cb0e535a73187552ce152619fdb017c503beafc1e94b6c7ffe534cd29fa6c98e63aaf51d70629e503da49e7539850987fa82794a774db0a0619207552ac8db6f4a6f8121c5bd50b9a090b174ce8828be0f085bb8c231500fcee3805d22c000cf23ce1563a72", 0xee}, {&(0x7f0000000700)="870984c25549bd7960b2be1a504c0040d75c29077da95a7aa25c1fbbf2b2672d6d2defb9bdc70bcadf4cf0f45bcde31f56d3dd64c4de1affbb57b59ed532cf7acb07c2b79371c1352bf9af7cbf962b32f60ccb0f52a49ce34bba726a3deaa3b8778f364cb0a7f040a4c7c8e2843faae3c06bcfb770a4629d0cd55a14718396f7", 0x80}], 0x2}, 0x20084001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7020fcdbdf2508000000050030000100000008000600db5e878fad272a6c9b8412d3f1291829f6a3b504c880409f", @ANYRES32=r9, @ANYBLOB="080031000100000008003100feffffff0500350005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@null, @default, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 1982.559992][ T2135] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x34000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x5}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080)=0x2000000000, 0x12) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x0, 0x1}) 18:43:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001cc0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x2b, 0x2062b041}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket(0x23, 0x80802, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000240)=@v2={0x2, @adiantum, 0x3, [], "37e2ac67d8cfc216b01da0e588789770"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000100)={'veth1_to_batadv\x00', {0x2, 0x4e21, @empty}}) [ 1983.181964][ T2175] dccp_invalid_packet: P.Data Offset(9) too large 18:43:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x6}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000108ff7f00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32=r1, @ANYBLOB="080003000300000008000f0000020000"], 0x3c}}, 0x0) 18:43:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x7}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1983.627884][ T2188] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000380)="1f8935748b5c2af83705958099ffe87c27e8f2f60c6cd61c440d7219e5369e010343e3f704e192ac38074f6de9093e0dfdf0e5ae5d1a5e4edc21dee639a0bbc44105083e26f31357b3fc874e2e87f44be3a3c3a0d7aa5052e9c398cb4d9464e976b4dee54fa25aceb70b62af93ae6294d93959fc0313d78247e4a3b972439ad66626d3da1ac4a43db9ad0ef60518f2aae8a8f35f7d6bb03224db4ff169f07f8b7c59b4b8329a62", 0xa7) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="5c5a97a3b64bcfc5d8ecc15427eae12fa833"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x48}}, 0x0) 18:43:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x400300, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060001000000000000e6ffffff", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002080000000000000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/149, 0x95}, {&(0x7f0000000880)=""/242, 0xf2}, {&(0x7f0000000980)=""/214, 0xd6}], 0x7, &(0x7f0000000b00)=""/139, 0x8b}, 0x4}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c40)=""/174, 0xae}, {&(0x7f0000000d00)=""/105, 0x69}, {&(0x7f0000000d80)=""/135, 0x87}], 0x3}}, {{&(0x7f0000000e80)=@nfc, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/100, 0x64}], 0x1, &(0x7f0000000fc0)=""/78, 0x4e}, 0x8}], 0x3, 0x10000, 0x0) r5 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r6 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r7 = socket(0x23, 0x80802, 0x0) getsockname$packet(r7, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f00000000c0)='erspan0\x00') [ 1983.890154][ T2220] device veth63 entered promiscuous mode [ 1983.944432][ T2220] device batadv0 entered promiscuous mode [ 1983.951910][ T2220] device batadv0 left promiscuous mode [ 1983.970740][ T2220] device veth63 left promiscuous mode [ 1984.072696][ T2224] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1984.210966][ T2225] 8021q: adding VLAN 0 to HW filter on device bond6 18:43:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x8}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c655a04000030205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9c8ef384546c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d138b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400040000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee00"/339], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz0', "80de3ef5db6c18b7ac8ad7d076a0bb754058b540337f83b07649ddc17113107af3329d990e98fef2becc29945990bb37455acf03245ea12ef2138a167eb86139e64cd2ee3e67ba028530"}, 0x4e) sendmmsg$alg(r5, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008080}], 0x1, 0x1d5c0e11eea8dfa3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@mpls_newroute={0x1c, 0x18, 0x2, 0x70bd28, 0x25dfdbfd, {0x1c, 0x80, 0x14, 0x2, 0xfd, 0x0, 0xcb, 0x1, 0x2000}}, 0x1c}}, 0x0) 18:43:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1984.706500][ T2294] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0xa}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1984.821931][ T2302] dccp_invalid_packet: P.Data Offset(9) too large 18:43:37 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x14, &(0x7f00000001c0)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r3, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0072ed3be8ec15ea0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) [ 1985.062787][ T2323] IPVS: ftp: loaded support on port[0] = 21 18:43:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0xf}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x10}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x18}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1985.776514][ T2310] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1985.811666][ T2337] IPVS: ftp: loaded support on port[0] = 21 18:43:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000006e40000000000000000a00ff0000000095000000000000008a316da10495b68847892ebf5745badb1f497ec43250a67faef251059b334cf6d74a2dc68fce5fce06cd6c857b154b6d88243b01e883450e48c5fd5c26358a053601946c52cf388520"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 18:43:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x2f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x2000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:39 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYPTR], 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, 0x0, &(0x7f0000000080)=0x20) 18:43:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(0xffffffffffffffff) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1986.539807][ T2413] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x3c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x3000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1986.663366][ T2420] dccp_invalid_packet: P.Data Offset(9) too large 18:43:39 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xffffff01, 0x4}, 0xc) getpeername(r0, &(0x7f0000000000)=@hci, &(0x7f00000000c0)=0x80) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r4, 0xf, 0x0, 0x0, {0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4044042) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 18:43:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum}) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000480)={r0, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x188, 0x0, 0x0, 0x188, 0x2d8, 0x2a0, 0x2a0, 0x2d8, 0x2a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x160, 0x1c0, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @ipv4={[], [], @multicast1}, [], [], [], 0x0, 0xbc03}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x8}}}, {{@ipv6={@empty, @local, [], [], 'veth1_vlan\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'ip_vti0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 18:43:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x48}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1987.215348][ T2440] ip6t_srh: unknown srh invflags BC03 18:43:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x4c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x61}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1987.795680][ T2430] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1987.857046][ T2438] ip6t_srh: unknown srh invflags BC03 [ 1988.055754][ T2461] dccp_invalid_packet: P.Data Offset(9) too large 18:43:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x63}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020601f43ee7afdcca6b20a283a30000000000000000000000fffe11000300686173683a69702c6d61726b0000000005000400000000000900020073020000000000000c0007800800130000000000050005000ad9631524000000050300010007000000"], 0x58}}, 0x0) 18:43:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x18, 0x117, 0x2, 0x4, "1f266c54"}, @iv={0x28, 0x117, 0x2, 0x14, "9be3afc7b3291bd1f970e2723eb8ddf4df43c9ff"}], 0x58}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) splice(r3, 0x0, r1, 0x0, 0x400fffe, 0x0) sendfile(r3, r0, 0x0, 0x80000001) [ 1988.771799][ T2476] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1988.798646][ T2477] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:41 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4fedf08ea0600000000000000323f4200000008674a0092960000"], 0x2c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="2400000022001f02", 0xffffff6d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x60801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'caif0\x00'}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 18:43:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x68}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1988.883910][ T27] audit: type=1804 audit(1585939421.768:941): pid=2484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1728/memory.events" dev="sda1" ino=16577 res=1 18:43:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x5000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1988.969921][ T2486] dccp_invalid_packet: P.Data Offset(9) too large [ 1989.028334][ T27] audit: type=1800 audit(1585939421.768:942): pid=2484 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16577 res=0 18:43:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x6c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1989.191589][ T27] audit: type=1804 audit(1585939421.768:943): pid=2484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1728/memory.events" dev="sda1" ino=16577 res=1 18:43:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x71}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1989.640088][ T27] audit: type=1800 audit(1585939422.518:944): pid=2487 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16577 res=0 18:43:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x73}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1989.751537][ T27] audit: type=1804 audit(1585939422.578:945): pid=2512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1728/memory.events" dev="sda1" ino=16577 res=1 [ 1989.845795][ T2495] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1990.171286][ T2535] dccp_invalid_packet: P.Data Offset(9) too large 18:43:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x74}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)="080db5055e0b") sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="b446c77436b09e0ef5eb5f3e8a269546e923514ce678c15929c265421f576b3d6fee5b8724557f204055deaa83da1b6c55629bdea27a92ed2922ebf1fc3af3141f05772110199dcc8b1800c0ef0dd22f97d14a03f9d122ee88372f1ae32dc66232d0777075eee022bd035f71c2492361f11c2d046ceb0e46131eb694bdbaf62993a0e8bd15eadab9ead4356f61a5d9f85f08b7d904ce2cd7207d979a6ad4dc95c3324e965b454f48fa9f1dc41d4d71ad88eff8f4b9e1f4f029b824ca5e0dd167546bb9", @ANYRES16=r5, @ANYBLOB="0a0028bd7000ffdbdf2501000000060001004e230000060001004e2200000500040002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x60010) 18:43:43 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000000000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e0000002080002000000000008000700000000000c000600080002007f0000013c52414463dd1e0c74614a4b77b7b66e96dd42d4dd3d44262afe1c2b94800fdc47c2221c9b3f6e32878522544949ec0988b2e6729ece50e4293487b38bf4d8a58f95d3eeccc88a"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x48084) 18:43:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee000000000000000100000000000000"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x7, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1990.771202][ T2548] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000010000000900010073797a30000002002c000000188401150e00000000000000010000000900010073797a30000000000900020073797a320000000014000000020a05000000000000000000000000001400000011000100000000f6ff0000000000000a"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r3 = accept4(r2, &(0x7f0000000000)=@ipx, &(0x7f0000000140)=0x80, 0x80800) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x80024) [ 1990.870195][ T2552] dccp_invalid_packet: P.Data Offset(9) too large 18:43:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x7000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 1990.914525][ T27] audit: type=1804 audit(1585939423.798:946): pid=2553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1729/cgroup.controllers" dev="sda1" ino=15708 res=1 18:43:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x7a}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x85}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1991.675960][ T2572] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1991.922735][ T3503] tipc: TX() has been purged, node left! [ 1992.062845][ T3503] tipc: TX() has been purged, node left! 18:43:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000440)='g', 0x1, 0x4004000, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1409, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4014) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x14, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0xc4, @rand_addr="c8612de663e33be7b55fb32739c00b43", 0x20}}}, 0x84) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newlink={0x50, 0x10, 0x581, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x14}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3}}, 0x20}}, 0x0) 18:43:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="76ae4455b0c6ba642b5d2c4c3956e3d41af244889c971c0083cd57a0cd51b0279aa872ade35dec185fcbf3ae87b6d80bfc4983836b5a6bc978dafb3828121cc29b103c9bd532ef6924e5081834a331c7fc13685b23762500cda5693d5debeecea8b0ff26da4e5d15e0088f57883594671903cc96c69a5b91e8de6c5c5d8a4225f1122f624ec77544a924d15822645e68b8959286e58b0c4e2a9aa505b187bb4aea10fc78ce1dda3b077b22fe8dd8e47924ad38803d22389c8151464dc00cdffa5c608bcb0ce77fa74a8e208c0b2a6b7ede2a80a217", 0xd5}, {&(0x7f0000000140)="ea17e6a55ada02f5f7968bee2944428b8d6234e02928485101b1", 0x1a}, {&(0x7f0000000180)="2f324f1da2521e0b5e4474b9cb03f6909096ce246f57e0f0e6392389c24788ae9e0c4492dddec547b59d60997f22f12e5942d7593393fd8caa0f870abd", 0x3d}, {&(0x7f0000000240)="8415a87f47f8408a119a84dd9ead9bb8f14626c93fbad8e80fb47fd3d5b225ef7ae981ec86fbd0", 0x27}], 0x4, &(0x7f00000002c0)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x30}}], 0x1, 0x810) getsockopt$inet_int(r1, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000000200)=0x75) 18:43:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1992.270266][ T2621] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x4}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x20000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x7, 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x5}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1993.342546][ T2651] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x8}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x3f000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000001340)=ANY=[@ANYBLOB="753c3d24320800000000000000bef61575b689a11cd8b721ef7ca7dd2401f86e4815c4a70b9f28ea5179a3ac7eae792cd2887b67e6a4d6b0", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf250200000048000180080001", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d616376746170000000140002007665746830000000000000000000000014000200626f6e64", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="300001800800017356313fdd6e05541c559144362affe82ecb8ae3389486e1367ba281fe7e86630ec88417396064a6a1aeea71e8bd95eb64d4dadb000c1fb613aaf28a1fbec6caa2724c77b562e8cb1da91143877acda874b72c605bc4d57b045deadb52c05a576990ddd86d862223caa1e8f9166d75222358", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067726530000000000000000000000000200001801400020076657468315f746f", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="fde1ab807251bc5d29ede6f4e3c63e232cc527108749103e1a0685b50557d2872dd2173791ac9850b14933567289e87e2964e3d5d00134a5126a5776bfedfb4aa731", @ANYBLOB="140000000008000100"/24, @ANYBLOB], 0x12}}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)="4d55269dadaa4930e88f94d1733c76c69651fbaaed653a915bd2c25d50f8b979c00478edceffc804d14b337ea8bcf4a04b579689e0b52f369a2f681d4d4c6c2655f79f06a370fa53a57b01eef28d693eb720043a45d3fd22bd3c08de7cf532efa4b693973632c3a2b3f61e3b364b7ee3889a5d1bea35cc4e10397c89b415a656d451c84256134fb290d513c7e5ad"}], 0x100000000000004f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/310], 0x136) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x48801) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(r1, &(0x7f00000012c0)="1e268a927f1f6588b967481041ba78600983f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b087511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) 18:43:46 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x11, 0x0, 0xffffffff) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="c49257ad314821600ebd0002eaacca9fd1957a1a07ed8574664cd0a91035671c736a7d3e41f2c5b950330d719c0a806e6d98549580daf45b2ef836fcc3b7f429caf05ec9a74eb4e92491e960410b5bbdd86a76ce795550bcc5032860f7f9e3bdb4cc7d010c2d8c840920ceca1005be50416eacafa8f7116d0a985672564b51cf8bdacc06808b353d", 0x88) r1 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x14, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @rand_addr=0x4}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e24, 0xffffff7f, @empty, 0xd1a4}}, 0x1, 0x20, 0x800, 0x0, 0x62, 0x0, 0x9}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) r6 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) 18:43:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa025281598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76468c46a84bd57aa33012ef381f87d4473499025de3b7ee000000000000000000000000000000c6df5845aa02bbc369b532f83dae6fd4a83c0f63a90790208994addad1298d1246b13c1774990b11880cb816e51578c97aacbbb35b6bb45c96129225db071a97dc659959"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x2}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1993.935313][ T2713] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x40000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xa}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1994.065528][ T2722] dccp_invalid_packet: P.Data Offset(9) too large 18:43:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xf}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x10}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x18}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) accept$nfc_llcp(r3, 0x0, &(0x7f0000000000)) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 1994.820329][ T2734] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x48000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x6, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 1996.013099][ T2790] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1996.104970][ T2799] dccp_invalid_packet: P.Data Offset(9) too large 18:43:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000030000100010000000000000000000000380001003400010009c301006d706c7300000000200002020000000000000000000000000000000000000000000000000000000006000000"], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000380)={0x8, 0x3f, 0x6, 0x1000, 0x9, [{0x20, 0x4, 0x2, [], 0x2}, {0x8, 0x7, 0x9, [], 0x305}, {0xffffffffffffff03, 0x3f, 0x401, [], 0x6}, {0x4, 0x5, 0x20, [], 0x400}, {0xffffffffffffffe0, 0x30, 0x8, [], 0x800}, {0x0, 0x2694, 0xc9ad, [], 0x8}, {0x7f, 0x100, 0x1000, [], 0x400}, {0x5, 0xd16d, 0x401, [], 0x2200}, {0xfffffffffffffff9, 0x401, 0x5, [], 0x6}]}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r1, 0x0, 0x100000001) 18:43:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x30}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv6=@dccp_packet={0x0, 0x6, "46895a", 0x10, 0x21, 0x81, @rand_addr="7d00b07dcce12100f4ffffffffffffff", @empty, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2de266", 0x0, "ee6e4f"}}}}}}, 0x42) 18:43:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x4c000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001940)=[{{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x3, @remote, 'veth1_to_bridge\x00'}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="4924cfb80c198e5745f826a79bc7fb52ae86c888fa7ef70b9ce0477f00c0a6dc71d6e3a032d620ba8180891bda2b2349321640759c3cc6aecab9db58fde43f257e702c201ee0386193a89ff3a2", 0x4d}, {&(0x7f0000001980)="10993637d4925a01a091e60f4ceeda0f453cecae5859243d023c9c38f585d7dd1d7d91fe2a3c20421d9ed02f93e421f4e359674331fb826f2b", 0x39}, {&(0x7f00000005c0)="e1e2faf9c4e0034a92e5a12a4787321a16d9317de256b5c84ffa3baea623407c380ff15738c4f90c00268b8e19a0c2198a95ac110a861beabdfdcc36b860077ffbe1f4414161531dab640a0c2efccd1c2a38f5af3f217e3e4abaa3759d4e717c12943247d3a67fd4f734a406ea", 0x6d}, {&(0x7f0000000180)="8b6cc0b2636cd158162c958a635a4e495f2e22bef4fb31c223bb2a9ec602aaecae8a76f695fa495c3d2b7d8f", 0x2c}], 0x5, &(0x7f00000006c0)=[{0x20, 0x108, 0x3, "7de26277e5515aa427464c8091"}, {0x40, 0x1, 0x2, "2859d9eb444b7a36105f8b10cd863e3fc85e2283f4dae996d2a4f32cd4832161d322f31a44da784dc49fd980741b8db3"}, {0x1010, 0x14, 0x2, "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"}, {0xa8, 0x10a, 0x1, "126b1be2c0e9c6e244b1e481eab767b19e718a847d14c07f81355eb68f61cd6f68a0cd19edb292a8176a04055494e1d7f864e72d8f632814e1c52744d78b981ae5ea818de6f5294536ed74c590bddca8a5aa8515bd465f22e3262d5aae2dbc0146ef1c9e66dc9ccb76f8b5a29415c278ea93e1e92540204f65b6af55d0e97165feedd99b6c8f2b0cb86ccc86c07d04236572b69bc4"}, {0xa0, 0x103, 0xff, "cc1e737a5464c461f940fb57211b7759888a7b87065eeeba7147268b8a19893690c2a5ea28166b260ef1875cef67f1a1ecd79aad8c81398f980740e991007301e85e6942d907f2636bcef480aca05418c7849136c120acf0d2b1a8e6e0cba09bde6f7add3332b06b9aa67fca7abb0288003ed075f6baa79ee6b41c988eda340d3398dd6c6e0a7d53adce7b82d2"}, {0xa8, 0x29, 0x80000001, "84dc461575ec425c443fa42101d235d96b6b824bbb7ae4d898873436ce36617a7ef7efd5ceb1a01cefb21b9d222385b8e4db65874d1dba39b4ef0217838a33c141740ba755950551314e1fd621ad5c879970c52ddca9d63636374963068adc39eeeab3c453d92159896acd4ebf3bc04ad1ee187fa96aa2057b317c5f1b05c58cacccb6eab73168d08408ec1eba1099b205887fbcaef9f269"}], 0x1260}}], 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) [ 1999.989328][ T2830] dccp_invalid_packet: P.Data Offset(9) too large 18:43:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2000.134914][ T27] audit: type=1804 audit(1585939433.018:947): pid=2840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1364/cgroup.controllers" dev="sda1" ino=16846 res=1 18:43:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x48}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x4c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2000.595029][ T2838] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2000.619119][ T2845] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 18:43:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x60000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2000.849038][ T27] audit: type=1804 audit(1585939433.728:948): pid=2840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1364/cgroup.controllers" dev="sda1" ino=16846 res=1 18:43:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) recvfrom$inet(r1, &(0x7f00000000c0)=""/140, 0x8c, 0x3, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) 18:43:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x50}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x60}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2001.220244][ T2873] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8913, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:54 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) syz_genetlink_get_family_id$gtp(0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:43:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0xfa4f6855f95b27bd, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x14, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6, 0xffff}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x4, 0x7ff, 0x4, 0x72]}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) ioctl(r9, 0x401000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000002000a000200000400020000000006006087ea6d7a0500010000002552e87c16b8c1c346ebf875ea69a8342365b986e34b80562b5b367bf751ab65f12fbb057f95f7a2e1d3d76e998f1baaa197ff542c0a6393b13642e5e22646c8e4a35e8a0de5d4431bbdc6aa48062e1c3c6a113bdc5a3ecfe5619ceebfb01eb76d40b393e07f9f9103ebf32e5dedba599d9232fdee6d536ab44da2"], 0x30}}, 0x0) 18:43:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x68000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x61}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) [ 2001.878739][ T2932] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2001.920944][ T2934] dccp_invalid_packet: P.Data Offset(9) too large [ 2001.921229][ T2931] device bridge_slave_0 entered promiscuous mode 18:43:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x63}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x6c000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x68}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:55 executing program 0: syz_emit_ethernet(0xaa, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000743c00fe8000000000000000000000000000aafe8000000000000000000000000000aa3c000000000000008700000000000000000000000064000000007b8517587bf054da0826a817dcb29d6e19dc07e8d907d6752fbb764152d10000036daeeacab00b521d1e1e6dbba6dac60192b80e56e4970c87e2948be6616d91f787dc09d9e4269976db0e19a56b56dd00"/170], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @llc={0x1a, 0x33a, 0xfd, 0x9, 0x3f, 0x5, @random="62ce486503d1"}, @xdp={0x2c, 0x2, r6, 0x12}, @llc={0x1a, 0x311, 0x20, 0x6, 0x1, 0x3f, @broadcast}, 0x9, 0x0, 0x0, 0x0, 0x92, &(0x7f0000000000)='wg1\x00', 0x7, 0x5, 0x1ff}) [ 2002.569494][ T2944] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@allocspi={0x140, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x33}}, {@in6=@mcast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x6}}, 0x0, 0xa00}, [@algo_auth={0x48, 0x1, {{'rmd320\x00'}}}]}, 0x140}}, 0x0) 18:43:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x71}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x74000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2002.790635][ T2965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:43:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x73}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2002.831102][ T2968] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2002.854103][ T2972] device syz_tun left promiscuous mode [ 2002.901667][ T2972] bridge26: port 1(syz_tun) entered disabled state [ 2003.041507][ T2972] bridge27: port 1(syz_tun) entered blocking state [ 2003.050805][ T2972] bridge27: port 1(syz_tun) entered disabled state [ 2003.062470][ T2972] device syz_tun entered promiscuous mode [ 2003.491899][ T2972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:43:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x7a000000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00e41b7008bc18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee00"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8913, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x74}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x740) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x33}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) [ 2003.880668][ T3014] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:56 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x8}}, 0x0) 18:43:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7a}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2003.978552][ T3017] dccp_invalid_packet: invalid packet type 18:43:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x9effffff, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x85}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xb0}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xf0}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2004.958270][ T3033] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2005.208268][ T3068] dccp_invalid_packet: invalid packet type 18:43:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:43:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xe0130000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x114}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:58 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005a0400000dab8c0f992a2ffa000000000000000000000000000000b50000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800b00010069703667726500001800028014000600fe8000"/48], 0x48}}, 0x0) 18:43:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8913, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:43:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000008000e) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2005.720602][ T3085] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2005.754811][ T3083] IPVS: ftp: loaded support on port[0] = 21 18:43:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x192}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2005.840032][ T3093] dccp_invalid_packet: P.Data Offset(9) too large 18:43:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xf0ffffff, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:43:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x195}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x198}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:43:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x211}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2006.659467][ T3112] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x222}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2006.734749][ T3088] IPVS: ftp: loaded support on port[0] = 21 [ 2006.970490][T26247] tipc: TX() has been purged, node left! 18:44:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xfffff000, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8913, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2007.572304][ T3174] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2007.629794][ T3176] dccp_invalid_packet: P.Data Offset(9) too large 18:44:02 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x1d, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e002e000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) 18:44:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2c2}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xffffff7f, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000080000000000000000063111c000000000095000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2fc}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2009.403150][ T3211] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xffffff9e, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000689000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="080db5055e0bcfe847a071") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="110000400000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="05003e0003"], 0x5}}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) 18:44:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x300}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x334}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:02 executing program 0: r0 = socket$inet(0x2, 0x80000, 0x940f) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x20}, 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000300), 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x334, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ac5951}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27c0f149}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11d66a62}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30dcd3ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31d432e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205ee9ca}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x19c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x209f43b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc48d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2041f54d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7428b573}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b7808a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65bb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40d279f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3522defd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb43f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x750}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x177f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2152}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9583}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5258637d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9916}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbab4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbecf6e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x730b1bff}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24c21508}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1332}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3773b1c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bdf1a07}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ebaf615}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54817aca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d1d7a05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x638e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12a66256}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e8edad0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x247c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f12}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e530b08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaad3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9087780}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8116}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17c54659}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43e619e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2823b7d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45b825b0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x252e034a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0xa95d158258429c80}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4911}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59395e02}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74ed059d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaad56cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14d88e6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57c15d6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ff1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x688b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6240b66}]}]}]}, 0x334}}, 0x20000000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000008c0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x39, 0x0, "c620d7d84710b1d68959c23e707528c486b53b9ff0079be57785e600c47bc3a9a272acf8607e591fe9e01b90ba086906f3c1b5f54e2dc7b01c0d6c9d33b3b3a167e4f137e8088e25eb2b2b778b022075"}, 0xd8) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000009c0), 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40)='wireguard\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000b80)=0xe8) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000014c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000bc0)={0x8b8, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_PEERS={0x830, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="52bd4827e9312a04b4d860bedff8fb74"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8419595aa69ab888faadafb120897ae909f8236063a771ecd796a0286ec29d09"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x630, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "40ac7c2d2757c8919d85e3200e96ffdc558a8cbf6f1cce9afd894155158d40ee"}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x19c, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x3f}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x7}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @rand_addr=0x81}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x37c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x31}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x9}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="52931b3cdaae536f0f609287f41d0ec2"}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="730717490b722a3539708403f0081aec"}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="09cfa5f5d5abed5e8e5a89f50d48697d"}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x9}}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x20, @loopback, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc4c85fed1002cd5698e3c40775623924cde64a397c156ec2241872aee591100"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e4acfdac711e97ac29ed366aa36503c150218ec2a72bb01923a468a44bf54904"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xfffffff0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:03 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4acfd000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200)=0x40, 0x8) 18:44:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRES16, @ANYBLOB="00decbd95a35c47cb99ec23c9cdca10c64ac09f5ea41ecef4ec9bf11dc000000800000000073f0d1c9750a3c7298a2334f3d5b0afc8c22081200000000001f0000000000000000ee0000000000000000ed53c09179800016d40d5c20069f98c80931592d5f0fbab758b94f73081bc6d7fa8b64babc19685f5a360cbbd1b352e9f9c2e069d6a554d12df16381f149f5aaedf20000000000007a94a1f3e5656cdc510000", @ANYPTR, @ANYRESOCT, @ANYRES32, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="394531a0d27a1f67024ad95d0705cfe418bf440ee568bdfb6e022b2e1cf9934cacddae3279977f4b2e315adb22be8b590adb5866e62895becd761cf6b90f620f9ac8f4c16afd7ac401435ac7ff7e9ada40c74bf45ff11a4b30fd8f37fae8fd82e66bb5eae13cf39ebc16d4d2657c5358db1ca204e06e129e731cd8d4430a5ebe4db0a969d55989c6104bf383a9c4e9897803ddf8a1"], @ANYRES64=r1], @ANYRES16, @ANYRES16, @ANYBLOB="01d2f1433975fd3c28fd48fcb9706d6ee57ba9fae7c10afa7b5cf789d0ed0284cf70cbe9e941a464e862600a16472ba30dcff73836d1951fc85eb04f87e8667b", @ANYRES32, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="1ef3bf8ec0f835f9b824adb7d99173ff2bae5dcddebdde01142f9765bea8c2299657bb56ea36b82c0b095127090daf45bd9205f6154d10813bfc631bd314ff52952970426fdfa691b91709c20a1284c2fd38", @ANYPTR, @ANYPTR64], @ANYRES64], @ANYBLOB="292b30609c11a3a2660dd32f0f6f0e01c5a6b3175d41d15585cb26b36946417e62638a0ef591281218c630c28aa39e8f3bd716ef595a0746766db3878005a54b9eed608275b3adac208b45d85c174faedcd9373bde175a42c67a2e5ca888a1ed", @ANYRESOCT, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYBLOB="2714c873522e2d6823b62e3617843b66a27ec71d45cd2d71da9be31a11fa006d909bb62b90cbc9e3f1f3bfd309578925896c18162e3620caddbcd1949bd00f461eb7562ed339988661780ac0643a16026a33c70bdbbdd84b7cd68555da07f8380d4d29bffd9249330cc6a4729e7d0894ee198c4c07192fce3cb2d0538f5c439ac18670e00a98f42ada2f50eb59d85e", @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYPTR64, @ANYRES32]]], 0xee) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000003c0)="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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfc, 0x1000000000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000000c0)=0xfffffc00, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) ioctl(r0, 0x8910, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000700000000000085f6f7ef3bd57eaa5fa37c05c7987b3c1d3f11b427c2b7ae9ebcf75acfe3c5169b3afa39af38645ec8263f7ca46326fa9f8e14e363f0155831abeb872e021ad932cd0000cc7dc69ef8160ded2dd35a74c3e1fc4c08"], &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) [ 2011.070136][ T3280] IPVS: ftp: loaded support on port[0] = 21 [ 2011.074340][ T3279] dccp_invalid_packet: P.Data Offset(9) too large [ 2011.076471][ T3282] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3ea}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0xffffffff, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2011.268704][ T3295] BPF:[1] FWD (anon) [ 2011.283082][ T3295] BPF:struct [ 2011.303799][ T3295] BPF: [ 2011.322343][ T3295] BPF:Invalid name [ 2011.344789][ T3295] BPF: [ 2011.344789][ T3295] [ 2011.382698][ T3301] BPF:[1] FWD (anon) [ 2011.396988][ T3301] BPF:struct [ 2011.410794][ T3301] BPF: [ 2011.424617][ T3301] BPF:Invalid name [ 2011.441863][ T3301] BPF: [ 2011.441863][ T3301] 18:44:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3f6}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184eaf}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 18:44:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3fe}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2011.813116][ T27] audit: type=1804 audit(1585939444.699:951): pid=3308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1375/cgroup.controllers" dev="sda1" ino=15710 res=1 18:44:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x500}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x600}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2012.180919][ T3298] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2012.191817][ T3320] IPVS: ftp: loaded support on port[0] = 21 18:44:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRES16, @ANYBLOB="00decbd95a35c47cb99ec23c9cdca10c64ac09f5ea41ecef4ec9bf11dc000000800000000073f0d1c9750a3c7298a2334f3d5b0afc8c22081200000000001f0000000000000000ee0000000000000000ed53c09179800016d40d5c20069f98c80931592d5f0fbab758b94f73081bc6d7fa8b64babc19685f5a360cbbd1b352e9f9c2e069d6a554d12df16381f149f5aaedf20000000000007a94a1f3e5656cdc510000", @ANYPTR, @ANYRESOCT, @ANYRES32, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="394531a0d27a1f67024ad95d0705cfe418bf440ee568bdfb6e022b2e1cf9934cacddae3279977f4b2e315adb22be8b590adb5866e62895becd761cf6b90f620f9ac8f4c16afd7ac401435ac7ff7e9ada40c74bf45ff11a4b30fd8f37fae8fd82e66bb5eae13cf39ebc16d4d2657c5358db1ca204e06e129e731cd8d4430a5ebe4db0a969d55989c6104bf383a9c4e9897803ddf8a1"], @ANYRES64=r1], @ANYRES16, @ANYRES16, @ANYBLOB="01d2f1433975fd3c28fd48fcb9706d6ee57ba9fae7c10afa7b5cf789d0ed0284cf70cbe9e941a464e862600a16472ba30dcff73836d1951fc85eb04f87e8667b", @ANYRES32, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="1ef3bf8ec0f835f9b824adb7d99173ff2bae5dcddebdde01142f9765bea8c2299657bb56ea36b82c0b095127090daf45bd9205f6154d10813bfc631bd314ff52952970426fdfa691b91709c20a1284c2fd38", @ANYPTR, @ANYPTR64], @ANYRES64], @ANYBLOB="292b30609c11a3a2660dd32f0f6f0e01c5a6b3175d41d15585cb26b36946417e62638a0ef591281218c630c28aa39e8f3bd716ef595a0746766db3878005a54b9eed608275b3adac208b45d85c174faedcd9373bde175a42c67a2e5ca888a1ed", @ANYRESOCT, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYBLOB="2714c873522e2d6823b62e3617843b66a27ec71d45cd2d71da9be31a11fa006d909bb62b90cbc9e3f1f3bfd309578925896c18162e3620caddbcd1949bd00f461eb7562ed339988661780ac0643a16026a33c70bdbbdd84b7cd68555da07f8380d4d29bffd9249330cc6a4729e7d0894ee198c4c07192fce3cb2d0538f5c439ac18670e00a98f42ada2f50eb59d85e", @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYPTR64, @ANYRES32]]], 0xee) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r3) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000003c0)="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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfc, 0x1000000000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000000c0)=0xfffffc00, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:05 executing program 0: syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x0, 0x3, 0x6f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x14, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r3, 0xfff9, 0x7, 0x621f86da, 0x7, 0x8}, &(0x7f00000005c0)=0x14) 18:44:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x700}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x12) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/321], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'tunl0\x00', 0x200}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x5a, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2013.004046][ T3429] dccp_invalid_packet: P.Data Offset(9) too large 18:44:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xa00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032cfff6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(&(0x7f0000008f40)) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e80)={0x2ec, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff7, @mcast1, 0x58}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf16}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00002bbd7000fddbdf250a000000080004000c045085716503801800028014000100ff0200000000000000000000000000010c00018008636700000000000000050000feffffe4c9dea350f3668ca23ac2cb8ae6760a5e38569ad5d087822a9c56552df25a7980c14288b0463a5e8a355d86cf33d351b2ae2774dec639c0ded7edaa8e9f945e6483f559f6aff1138651c7cf6e7c6cbb64729918d68e94cdd432"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:44:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x63, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xf00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2013.464896][ T27] audit: type=1804 audit(1585939446.349:952): pid=3451 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1377/memory.events" dev="sda1" ino=16483 res=1 [ 2013.576122][ T27] audit: type=1800 audit(1585939446.379:953): pid=3451 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16483 res=0 18:44:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2013.735822][ T27] audit: type=1804 audit(1585939446.379:954): pid=3451 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1377/memory.events" dev="sda1" ino=16483 res=1 [ 2013.930485][ T27] audit: type=1804 audit(1585939446.679:955): pid=3472 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1377/memory.events" dev="sda1" ino=16483 res=1 [ 2013.991030][ T3473] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xfe01, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000280)=@req3={0x9, 0x3ff, 0x3, 0x800, 0x6, 0x8000, 0x400}, 0x1c) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f00000000c0)={[0x2fb41a61]}, 0x8) [ 2014.241233][ T27] audit: type=1804 audit(1585939447.129:956): pid=3458 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1377/memory.events" dev="sda1" ino=16483 res=1 [ 2014.302745][ T27] audit: type=1804 audit(1585939447.129:957): pid=3461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1377/memory.events" dev="sda1" ino=16483 res=1 [ 2014.415546][ T27] audit: type=1804 audit(1585939447.299:958): pid=3490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1377/memory.events" dev="sda1" ino=16483 res=1 18:44:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565a8ab27eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b21e72acabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00e2ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee000000000000000000000000b183108c31b33b7a22e14fb5682f70b74e11085658a96016b51297793bc440a95ecad3b7df27df3486d4067945dac0d77a85f4fc3ec28645dddc5eb5eb6f2f67e3c44aafa3793f924aa4ea89cd7b29b0e6c90403ca1d2b34e5b0226aa00653674d120420100c1cb840de02ef296b9680568e5a33d6d89a438338cd86bfc7ce49fd9177dd917458853896b0a0fbded3e4b59e7186b5a3f6fb580aa174974a9e3858aaf8014c3385721b6a980ada911f6b6c8546dcbdb3c8e6f4d4341500"/518], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x28) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000100)=0x8) 18:44:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x1102}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x2, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x4, 0x6, 0x8}, 0x10) 18:44:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) socket$inet(0x2, 0x7dea827a9c9037d1, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="120800000000003b117a9705000080004007eff1ed3c9aaec98633b71b6579e715416989f1ea5688cdcb3831bcd5f33c58e3c7806dc780db62f6e06e63ef06e2361c478e35c0161c4a0dc54edcc90a35d0b58ccb2865f56680d96ac78202a840ea3cb4da", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002e0007d000"/20, @ANYRES32=r5, @ANYBLOB="01000000000000000000f1ff0c0001d851ff7f00000000000083cf"], 0x30}}, 0x0) 18:44:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, "ff7f07", 0x0, "1000"}}}}}, 0x2e) [ 2014.610539][ T3509] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x3, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x1401}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:07 executing program 5: r0 = epoll_create1(0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 2014.778015][ T3520] dccp_invalid_packet: P.Data Offset(9) too large 18:44:07 executing program 0: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket(0x10, 0x3, 0xc) write(r3, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r7, 0x3, {0x1, 0xf1, 0x3}, 0xfd}, 0x18, &(0x7f0000000140)={&(0x7f00000000c0)="d18487d0b5577050975a52f1f7e68a9bc58f7d851e1400733cb12f2b8254354dc4ce873df6cf34691b726b659e5262922528532dc2b0eba18a43f751743ea4ebf9e02883a469082d7d9ddd356b428aecd1ea854d4e55a83ec711513397180d41d2e1", 0x62}, 0x1, 0x0, 0x0, 0x4000}, 0x20810) close(r3) 18:44:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x1800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2015.555280][ T3544] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, r0, 0x0, 0x3d63) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2202}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x4, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:08 executing program 5: r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e000000880306fb0a000200060ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r5}) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000400180008002bbd7000fddbdf251d0100000c000b00030000600000006005000d000900000008000e00", @ANYRES32=r5, @ANYBLOB="15000400040000a0020200009af1b3247c2dd26301000000150001000300008003020000c8a3c1c8ba3f29db00000000"], 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4004014) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xfffd, 0x3, 0x9, 0x1}, {0x800, 0x3, 0x7f, 0x800}, {0x7f, 0xce, 0x3f, 0x7}, {0x1, 0x80, 0x9, 0x1}]}, 0x10) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r6 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) sendto$ax25(r6, &(0x7f0000000140)="6f4aadb52affdad024fb7b8ed2f83795c729654c13696e588ebb48e734182f0628de11e19fa1ffb259d59dca2c233f1269883b96aec95fda680f6b7fa3fe528e8dd0af14535da37a937b5a04ba2ddce7582c5371", 0x54, 0x4000000, &(0x7f0000000240)={{0x3, @bcast, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 18:44:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1d5a974576f3f24ded088582d74a"], 0x3ff800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000002, 0x0, 0x0, [0x6000000]}) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0xffff, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x38) [ 2016.213835][ T3600] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2f00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:09 executing program 0: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x81, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb, 0x12040}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @bond={{0x0, 0x1, 'bond\x00'}, {0x3e, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS, @IFLA_BOND_AD_SELECT={0x0, 0x16, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x0, 0x1b, 0x1a}, @IFLA_BOND_ARP_IP_TARGET, @IFLA_BOND_MODE={0x0, 0x1, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x2e, 0xa, r3}]}, 0xa4}}, 0x0) 18:44:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x5, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000500)="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", &(0x7f00000000c0)=""/62, 0x4}, 0x20) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/196, 0x62}], 0x1) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x14, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={r6, 0x5, 0x30, 0x5, 0xf6}, &(0x7f0000000180)=0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller1\x00', {0x20000002}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) [ 2016.501508][ T3626] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2016.528275][ T3623] netlink: 97 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x2fff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2016.602860][ T3636] netlink: 97 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2016.614486][T26247] tipc: TX() has been purged, node left! [ 2016.637211][T26247] tipc: TX() has been purged, node left! 18:44:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x6, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2016.648584][ T3631] dccp_invalid_packet: P.Data Offset(9) too large [ 2016.668027][ T3635] sctp: [Deprecated]: syz-executor.5 (pid 3635) Use of int in max_burst socket option. [ 2016.668027][ T3635] Use struct sctp_assoc_value instead [ 2017.298550][ T3648] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2017.345286][ T3643] sctp: [Deprecated]: syz-executor.5 (pid 3643) Use of int in max_burst socket option. [ 2017.345286][ T3643] Use struct sctp_assoc_value instead 18:44:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair(0x2b, 0x800, 0x6c, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r5, 0x23f, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xf8}, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x2c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000440)=0x8000, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x7ff) sendfile(r7, r6, &(0x7f0000000040), 0x100000001) r8 = openat$cgroup_ro(r6, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r8, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x2}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0xd, 0x8, 0x4}, &(0x7f00000002c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x2}}, 0x10) 18:44:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x7, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:10 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa6, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffff81}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000017c0)={r1}, 0xb) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x75, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000280), 0x2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x18) [ 2017.808666][ T3685] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f04", 0x0, "1000"}}}}}, 0x2e) 18:44:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3403}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0xf, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3c00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x3f00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2018.455147][ T3700] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x10}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x48, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2019.089802][ T3731] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, r0, 0x0, 0x3d63) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x4c, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x4000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x7, 0x12) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x17) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2019.780544][ T3765] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f08", 0x0, "1000"}}}}}, 0x2e) 18:44:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x60, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x4800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x4c00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2020.154062][ T3791] dccp_invalid_packet: P.Data Offset(9) too large [ 2020.193023][ T3800] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x5000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x68, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x4800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x5e03}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x81, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 18:44:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x1ff, 0xffffffffffffffde) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2020.710334][ T3815] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2021.165197][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2021.199649][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2021.208047][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2021.281875][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2021.351243][ T3840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2021.440246][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 18:44:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f09", 0x0, "1000"}}}}}, 0x2e) 18:44:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6100}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x6c, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:14 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004060501470080ffe1ff94902ef4ffff0c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r6, 0x23f, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4005) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:44:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x67}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) 18:44:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c659385943d30205e2d20656d6f72792e6c616e317b206d656d6f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcdce7a367fc22372c64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a01233932e93608ed16149749f7a53c09db4ca9722d602042e641c1d511a45053d271dfbf354ba38683474f457763558cd893e1b22d112c4601c79e1e72bbabf385b3c47cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee00"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2021.964545][ T3866] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2021.983531][ T3865] IPVS: ftp: loaded support on port[0] = 21 18:44:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6300}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x74, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2022.087694][ T3873] dccp_invalid_packet: P.Data Offset(9) too large 18:44:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x6c00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7100}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2022.758349][ T3889] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:15 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) socketpair(0xa, 0x1, 0x2, &(0x7f0000000040)) [ 2022.939007][ T3865] IPVS: ftp: loaded support on port[0] = 21 18:44:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7300}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x7a, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:16 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000140)=0x2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 18:44:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0001202e2f66006c659385943d183001e19a75dc2072792e6c616e317b206d65696f72792e657665007473000ae0a44301e35f6ea70565eb521d078e8331cc494cda1a5bcd4af9464c8fcda773d09c01570e0669ce7ac64b9cd509bf542d6943a89ac7f0a5cd01ffc671f4afd52f9209dfb706a9a6ef38a967c34a000e6aa52f4a78b569fa02527b598a39c56ad5eeeacb5d65f04751f1caca27b2b1f3608c09e7c2d66a18c484aee2d1b950a92e2214ac483a0123f3c76741b8cbfabc9749f7a53c09db4c05722d602042e641c1d511a45053d271dfbf354ba38683474f457c63558cd893e1b22d112c4601c79e1e72bbabf385b3cc7cfb0af700000051a400000000000000000000003db85b12618c42624a043a5132da3377e49c53bee9bdead00ea8681361c18a124419bb93e420e42ed65f78a573a1f06887e0afbdf007f4deea9c76473499025de3b7ee"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f47", 0x0, "1000"}}}}}, 0x2e) 18:44:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/338], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2023.823070][ T3984] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2023.850916][ T3983] IPVS: ftp: loaded support on port[0] = 21 18:44:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2023.933857][ T3991] dccp_invalid_packet: P.Data Offset(9) too large 18:44:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7400}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x7a00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x8500}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x9201}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2024.746891][ T4017] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f00ff03f4f9002304000a04f51108000500020100020800028001000000", 0x24) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, r2, 0x2f45de73e75c9df7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000500)=@sco={0x1f, @none}, &(0x7f0000000380)=0x80, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/353, @ANYPTR64], 0x169) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x13f) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(r0, &(0x7f00000012c0)="1e268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, r4, 0x2f45de73e75c9df7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl(r3, 0x8913, &(0x7f0000000040)="08bd8ffb370be073ffffff650d8400000000000040aefee10b797cde583b5c83ce6b45316de8") 18:44:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x2, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2024.811250][ T4036] IPVS: ftp: loaded support on port[0] = 21 18:44:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x9501}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2025.065296][ T4072] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2027.039831][T26247] tipc: TX() has been purged, node left! 18:44:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000240)={0x9, "a662990000619c04f43cde3f96fdf68cf3bd12ec6ad472a4b60e2e66d15a97aefcbe9772d36bdade9e33a6da6b1dbb7abe654183078cbde7899a889379e18165cb06d78a498612f89411b4e365e10e0ce5f280a83f9a7f42247677e077bca0a1a47f889288a58ce4bbc0e814fc5e710a9abdef57f3ffe6ed29c724b04b638d1b"}) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0xfffffdef}}, 0x0) 18:44:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x3, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x24) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r5 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) connect$rose(r5, &(0x7f0000000280)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}}, 0x0) 18:44:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x9801}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f63", 0x0, "1000"}}}}}, 0x2e) [ 2029.061989][ T4138] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x4, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xb000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a300000000010000300686173683a69702c6d6163000c0007803200124000000000050001000700000005050005000a00"/84], 0x54}}, 0x0) 18:44:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xc202}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:22 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 2029.563622][ T4180] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r4, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000240)={0x1, @remote, 0x4e1e, 0x84, 'dh\x00', 0x30, 0x6, 0x7}, 0xfffffffffffffe94) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r5, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="008a000000070000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="00200200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r9, 0xf, 0x0, 0x0, {0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 18:44:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xd403}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xea03}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xf000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2030.160273][ T4171] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xf603}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2030.206424][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2030.507312][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e) 18:44:24 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) 18:44:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x5, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xfc02}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:24 executing program 5: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x100007f, {0x2, 0x0, @loopback}}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="3f000000000000008000000100000000010000005b0e0000030000000000000000000080000000000c00000000000000200000000000000000000000000000000000000002000000002000000000000000000000000000009e0600fdffffffffffffff0000000000020000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000030019000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000bd6971d2022ec561e019f46d55606b9ef4784e69500648877e3ebe602bb15b57231ce47c0102b5fe"]) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="f06863e0a373170218ed447ab1d99905448193a53023c9dad7daadd342b4743d478f40b1e1f5f9a7f0ea8a9971971df97890ba684ac2a3c90b7d02953364c3d1f0c02e409e01b5f9eaceca0baa34de44977458b868281dafa1a4605779", @ANYRES16, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000009b54e67ea68eb0bbf8b55fe5e71af8077bf4e9fd824b35005f8fe4e59da48a21598bbb706d9e387ec7979b4cc8c10884d45c079d02b41a26abc953777bfe815fe955276600a03805809fbfd3cd12b9cd46a19b80c6bc577e035fd0a90e93", @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x2, "6c96a9f78cd31dc5"}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x2, 0x20240009}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 2031.258707][ T4251] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:24 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = accept4(r2, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0x80, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') pipe(&(0x7f00000006c0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r4, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x504, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c084}, 0x80044a4) [ 2031.346135][ T27] audit: type=1804 audit(1585939464.231:959): pid=4255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1758/memory.events" dev="sda1" ino=16503 res=1 [ 2031.431012][ T4258] dccp_invalid_packet: P.Data Offset(9) too large 18:44:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xfe03}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x6, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2031.462459][ T27] audit: type=1800 audit(1585939464.261:960): pid=4255 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16503 res=0 18:44:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0xa0539000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r7, 0x1000008912, &(0x7f0000000280)="080db5055e0bcfe847a071") sendfile(r6, r5, 0x0, 0x100000001) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x492492492492805, 0x0) 18:44:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xff00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xff0f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2032.316916][ T4267] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg0\x00', 0x2}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) close(r1) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x2, "1000"}}}}}, 0x2e) 18:44:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xff2f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x7, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 18:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="5f1c95966a83c995f8f51bb1c4182c30cd5842f9e86e6fe275120d0d0d7a2646c7d86c37213af2c5070e433df9397147fb8cbd70af775ed351fc487b77d1aca32e01e4042147bd8330c8524a4d4c241a501abc51476f2ea41dbc333d9f2b") r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r1, 0x25, 0x0, 0x0, {0x25}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 18:44:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/330], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 2033.227649][ T4309] dccp_invalid_packet: P.Data Offset(9) too large [ 2033.251676][ T4313] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0xffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xf, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f00000050c0)=ANY=[@ANYBLOB="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"/19872], 0x4c8c}}, 0x0) sendto$rose(0xffffffffffffffff, &(0x7f0000000300)="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", 0x1000, 0x80, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 18:44:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2034.175102][ T4330] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2034.196447][ T4331] netlink: 15140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2034.217327][ T4331] netlink: 4156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2034.270527][ T4333] netlink: 15140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2034.283158][ T4333] netlink: 4156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2034.395328][ T4362] dccp_invalid_packet: P.Data Offset(9) too large [ 2034.928762][T26247] tipc: TX() has been purged, node left! 18:44:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x3, "1000"}}}}}, 0x2e) 18:44:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x48, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f00000050c0)=ANY=[@ANYBLOB="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"/19872], 0x4c8c}}, 0x0) sendto$rose(0xffffffffffffffff, &(0x7f0000000300)="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", 0x1000, 0x80, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 18:44:27 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:27 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x4e24}}) getsockname$unix(r0, &(0x7f0000000300)=@abs, &(0x7f00000000c0)=0x6e) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0xa8, 0x2, 0x2, 0x3, 0x0, 0x0, {0xc}, [@CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={[], [], @rand_addr=0x3ff}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="0d9588e8f921d86184448f8609f96e5a"}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x19}}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x401}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24004101}, 0x20000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574680000000000000000000000000000000095001bbd6aaa6fa329fcb7be480f6561", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007395a992848f729", @ANYPTR, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000ab"], 0x3}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f00000004c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:44:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e640000004501c9a30008000100060000001b95e0405c01100c1f1e6832c1cf"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2004000000000000000010000000ca14e4076fcb15cbc3588bff187786482129d13068a9b93c405ba6f8432d70477588ba8716474558074b57debe9e00932bb1a68cb63b1159055cee2925e97377e6ccbbc90446808981c3190c436c5002abbc1ffe28493a73a9cbd186f4d592d31a27eba5f8d340cbea96b715650c3db3edf684fb7a4b4c38a1c228164ee674e0db6f3a637c96beec9ad5b85a1f57461d5a9a6c7711210cfef32730fcd7c965d33d7b54e79407b6b1ba99709557fbda09a522024c0f4e73e6f1fc6293d8bec82be04d8c066bb22d317e8bc394b90cef0c44a6fac431f6dc9f40d37afbffffffffffffff", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0xe}, 0x0) [ 2035.034089][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x5}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2035.173854][ T4379] netlink: 15140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2035.199439][ T4379] netlink: 4156 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000640)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xffffffaf) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3}, 0x4) 18:44:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x4c, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2035.239345][ T4390] bond2: (slave bridge19): Enslaving as an active interface with an up link [ 2035.256248][ T4393] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2035.271756][ T4384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2035.343620][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind(r0, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000480)={0x1, 'netdevsim0\x00', {}, 0x7}) bind(r2, &(0x7f0000000100)=@ax25={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r5 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r5, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000440)=0x3f, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, "6f32f0c63335a739c335"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x4850) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) [ 2035.404900][ T4421] bond2: (slave bridge20): Enslaving as an active interface with an up link 18:44:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2035.806629][ T4449] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x8}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:29 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in6=@initdev}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x414}, 0x804) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r5, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80004}, 0x8004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120000, 0x1000}, 0x24) 18:44:29 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x637303b6af3e67d3}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000007a2ac4e1baa4aa0a9873beed4cf099a2962ded153c64a6980621000000003f91dab21cc9406778b440249a17858195b16d8446ed35724b22e09cd3fd0d3e8180397d7cbcf5db397e15b0fa424d9f0cc6be722173f61bf06e6dc0745752427628433e3e6cd02ddf78070605f488", @ANYBLOB="c96ac16b790927d9466b17e2bdefe3561e50939f77", @ANYRES16=r1, @ANYPTR64, @ANYBLOB="b8475363e21c7e128d69df9b6f5232bed660c03fa253948423b3dcc399dfd39d3ab5372bc37e7b86c00055422a709197e1d84fcff40c46e729405c2dab8f"], 0x5}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c005c7dc3eb0be7e920666f26e1521d1f27c138e6b7216a5c1d900f577ea883f13b1f0c96c4ba2d0afd977a074edc413fc29e019651b062770403c43a060ea30a627632401c1368d385ce268a0a5404f1dfb094e6fcae838e1867e2b780e5ec294dddfec677766e4aa103c17f1249fbdd090570c19f095bfe4bc483f5006820", @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a00feffffff08001700", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r8, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="c6000000", @ANYRES16=r5, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014001f0000000000000000000000ffffe000000106000e0001000000e3fc0200000000001400200000000000000000004800ffff0000000006001b0000020000"], 0x64}}, 0x0) 18:44:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x4, "1000"}}}}}, 0x2e) 18:44:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x60, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/92, 0x5c}], 0x4, &(0x7f0000000300)=""/136, 0x88}}], 0x1, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000901}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x28011, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) sendto(r1, 0x0, 0x0, 0x24000880, &(0x7f0000000000)=@ethernet, 0x80) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, 0x0) [ 2036.610031][ T4487] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xa}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2036.683724][ T27] audit: type=1804 audit(1585939469.572:961): pid=4486 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1397/cgroup.controllers" dev="sda1" ino=15985 res=1 18:44:29 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000680)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_connmark={0x38, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x3, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}}}]}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14004040}, 0x44090) 18:44:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x68, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2036.822525][ T4486] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 18:44:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2036.890049][ T4486] File: /root/syzkaller-testdir621959818/syzkaller.KxCsnB/1397/cgroup.controllers PID: 4486 Comm: syz-executor.0 [ 2037.022857][ T27] audit: type=1804 audit(1585939469.912:962): pid=4491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1397/cgroup.controllers" dev="sda1" ino=15985 res=1 18:44:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in6=@initdev}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x414}, 0x804) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r5, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80004}, 0x8004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120000, 0x1000}, 0x24) 18:44:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x10}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x18}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2037.485626][ T27] audit: type=1804 audit(1585939470.372:963): pid=4519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1398/cgroup.controllers" dev="sda1" ino=15985 res=1 18:44:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x30}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2037.611206][ T4506] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2037.629177][ T4519] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 2037.647146][ T4507] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2037.670732][ T4519] File: /root/syzkaller-testdir621959818/syzkaller.KxCsnB/1398/cgroup.controllers PID: 4519 Comm: syz-executor.0 18:44:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x5, "1000"}}}}}, 0x2e) 18:44:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001480)=[{&(0x7f00000001c0)="d6be", 0x2}], 0x1, &(0x7f0000000080)}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendfile(r3, r0, &(0x7f0000000080)=0x200, 0x7) 18:44:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x6c, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:31 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x9}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r3, r5, 0x0, 0xf03b0000) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 18:44:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2ee6bc40dbce6995}) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r2 = accept$nfc_llcp(r1, 0x0, &(0x7f0000000140)) bind$nfc_llcp(r2, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x1, 0x20, 0x2, "5eeea2044c4eaf0175cbdee7f2a94497301da67bc9476745518bd2e90024a6f1f54bd9b19da9630af87bf858474d7d65bc9bdf5dad8f9eacf9177da4b100a2", 0x2c}, 0x60) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000010000108512695f2c347fb2100000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc) socket$netlink(0x10, 0x3, 0x14) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'nr0\x00', 0x400}) [ 2038.379760][ T4551] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2038.430584][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x48}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x74, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2038.499793][ T4561] dccp_invalid_packet: P.Data Offset(9) too large 18:44:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x14, &(0x7f00000001c0)={r6}, 0x8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xb0, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40800}, 0x24000800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x8001}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x338) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r7, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0xf9, 0x5, 0x1f, 0x20, 0x9, 0xbe, 0x3, 0x80, 0x2, 0x8, 0x20, 0x0, 0x10, 0x9}, 0xe) 18:44:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x50}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x60}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2038.986335][ T4572] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2039.099168][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2039.265947][ T4608] dccp_invalid_packet: P.Data Offset(9) too large 18:44:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x6, "1000"}}}}}, 0x2e) 18:44:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x61}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x7a, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f000017e000)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0xffffffffffffff63}}]}, 0x13c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'veth1_to_bond\x00', 0xfff}) 18:44:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "81fe318715d68cb9c397360c0be42110c9110908983416c344cee31a200a82107ad28bc9d7e7910801a9cd1de8f313d475b3150f9c10051e0dbbc7879a27cb561fa1f77f28c09ee33023fd21e9cb6e3098f1099e56966d437812188679dfbd525cfe53cf877cca9a101df0732ebdb996"}, 0x74) r1 = accept(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x10000) sendmmsg$inet6(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="0dbd", 0x2}, {&(0x7f0000000500)="e0cd", 0x20000502}, {&(0x7f00000000c0)="9f269e9496f42e79e8b1eb3f23bd24dc05540ed086f920a857", 0x19}, {&(0x7f0000000200)="e3d76a8ecb6a6d851aad4708024ace6d4e96435b2427d1c81f9248f8eed0adfde920b7", 0x20000223}], 0x4}}], 0xd, 0x0) 18:44:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) [ 2039.954973][ T4621] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x63}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) [ 2040.098628][ T4630] dccp_invalid_packet: P.Data Offset(9) too large 18:44:33 executing program 0: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000fc48f6f9f83e500000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="84007550ca472cda2ebaeb34b93e8faedc00002c00010700"/35, @ANYRES32=r4, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = socket(0x10, 0x2, 0x2) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c000107000000000000000000800000", @ANYRES32=r7, @ANYBLOB="0008108000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e22, 0x7, @mcast1, 0x1000}}, 0x7f, 0x6, 0x2, 0x3, 0x140, 0xfffff7e8, 0x5}, &(0x7f0000000080)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r8, 0x2, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249269c, 0x0) 18:44:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x68}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:33 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0xfffffffd, @empty}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r6, @remote, @multicast2}, 0xc) [ 2040.759509][ T4636] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2040.824599][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2040.902998][ T4652] bridge21: port 1(syz_tun) entered blocking state [ 2040.911060][ T4652] bridge21: port 1(syz_tun) entered disabled state [ 2040.937350][ T4652] device syz_tun entered promiscuous mode [ 2040.983056][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 18:44:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x7, "1000"}}}}}, 0x2e) 18:44:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6c}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 18:44:34 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xaa, &(0x7f0000001200)=""/170, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x70) r3 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r4 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r4, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000280)={r5, 0xe327}, &(0x7f0000000380)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x71, 0x11, 0xa9}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r6 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) write$nbd(r6, &(0x7f0000000400)={0x67446698, 0x1, 0x2, 0x4, 0x2, "ab2541b783fdb12a2b51a48d9866d13d94eead215016be1eee9cd8454f9fe35a867ea19066661d88b38dc08f91b0ee4fb5b24a7ea7a2e34eb9f023996ac2689a6d62c9be5bf6805166d6c86373fa8abd3c4a3ee5e0053db477af33ad31dd1cf3e11186b179b51afaaa6dcbf1d9713ac7679ed8e235b58afc0ff855334ea6162a9edbab73a396fdaea99ee3b5dad4c9ebfdf2a36789929638bbb4eee2e9438d445bb5f6aa2f"}, 0xb5) 18:44:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYBLOB="74972d7de26e7ce232ab64850685400daf0c9bc1d0e7dd9f813ca731924b81bfc0580f110c7e207d738e9a95112473f223bb070c03fae7160082cb000000000ea78ede3e0273f4f9827f5fc5be74c6abbc97f38e679b84567c5066ec96a763f252437ce3dfa6a8b4bcb012c5c4822349ccaa484e128994ddcdc0048324c8a345205fe204dcda4e3d10195cee7f2df0194e7121ce2e171b336ba77d7e774b2231a0cc675a09efe3f3be0a3633d2e308407cef4bb2389292d77bd172c274ae4ff0ead9c914897dcd4896d399f97232095b15a9fb8196399b95ca8ff5902981874d3f9f06398e9c13f3bf2e", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=0x0]], 0xf6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xc44fc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x0, 0x20, 0xfc, 0x1, 0xc8, 0x1, 0x2400}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20044081) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r3, r2, 0x0, 0x20100000001) [ 2041.801887][ T4681] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x71}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2041.914613][ T4688] dccp_invalid_packet: P.Data Offset(9) too large 18:44:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x3, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:34 executing program 3: syz_emit_ethernet(0x41, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x0, 0x3, 0x33, 0x64, 0x0, 0x2, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, {[@generic={0x88, 0xffffffffffffff64, "52ad5df7faab2bbf341cd10000000000"}]}}, {0x0, 0x4, 0x0, @empty, "2f2cf0"}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 18:44:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32=r0, @ANYPTR, @ANYRES16, @ANYRES32=r0, @ANYRES16=r0], @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="e5c2cc2593e4bfd8ddec05a19246982c789a58e86916929e81461e1700264317aa55f41622c772bed93f2bd2c2c4cbd8be131ca63cded61422f80ceaac3eb94897fea14e1bddc9c9e5d957302976294ee1a49a09", @ANYRES32, @ANYRES64, @ANYBLOB="0964a6e8e40e9f0b31deada9bed523b25aeaf445baf56aeb7710c9378c07f7eb8f7b47973d5b44973c3cf38cd895d945f80aac7ad873f5f3c0cb0b31d3d20329b16283f6ef8d0cb7ea8adec9673a5a17ba9eb6dab08547af2437483a10d25645a4a614d88a0fca999aebe2ec6b1f8421008074538ca7", @ANYRES16=r0, @ANYRESOCT]], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair(0x21, 0x4, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x14, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r5, 0x1}, &(0x7f0000000300)=0x8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000606010800000000000000040000e6ffffffffffffff000060efab3788107e8ce64582b48145aaa74dd2bbed9ab68df405cd91233cbbeab792c8be90faf7e301a1411ccbbff879a185d3b1d08ea9c2f281da103202ce41ed0dbf7a511eea34e5df1a431360892c194f72bcce0d03e7f88b132ef08ef73ed3643af57b1124611c4314edb39b697489c045a2714b2bf6bf588622700f57aecc73c7d9bfd74aa4e8a35b455240a455a56f62ab155eb5063c3e466d20dcf2"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x84, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x84}}, 0x40040) sendfile(r6, r1, 0x0, 0x100000001) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x2e45}, &(0x7f0000000380)=0x8) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 18:44:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x73}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5051e0bcfe847a071") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008108e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b8004099100000000500150002008178a8001600140008c00c00100003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3089ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x14, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e23, 0xfc000000, @ipv4={[], [], @local}, 0x5}}, 0x6, 0x1, 0x800, 0x8, 0x8, 0x1, 0x3}, &(0x7f0000000140)=0x9c) [ 2042.182535][ T27] audit: type=1804 audit(1585939475.073:964): pid=4706 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir157982685/syzkaller.iZABHT/1768/cgroup.controllers" dev="sda1" ino=16194 res=1 [ 2042.494405][ T4705] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2042.511678][ T4714] IPv6: NLM_F_CREATE should be specified when creating new route 18:44:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x8, "1000"}}}}}, 0x2e) 18:44:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x74}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000540)="0d1702e2f83681144571fa7568c0270386e1454f160dc2c4d438efce5c57abcdee56855ef54f405c06b8ac11ff6940777f6541b9e7ae28ae61062f374b7c72d907c9aadfb23a555776051ad4c3bfc1e0f78aa9dbbbb3ee667430f5d5ec7feb2e4d679bc3e422cb8802d082676b584fc912a0486756444f63f34f7e0134e16de69b74ae37a9521d03221d86a3dfdb14379926669f759333f38e932d2c538dd3d05645e5f3f439f471fd8f9b116e1090868934429e2b01754b4e5d34752341a0cbd5df83e012258f7fa304630633fcb9cbcfdccee3d5b55f4ff545", 0xda}, {&(0x7f0000000640)="3ad0272e2057b0", 0x7}, {&(0x7f0000000680)="56302f680af39f5b62f8d515bb352fe266953070910117f3a9ab6d1077491c7a502ebbf06477cfa9ad947a8ac30aaf98798b53be62b76a0a999f775ea0248d2d83dc731afcf54503601aa64e2b06c6784c95c9300597800dea84df68cdd429e1e5a7316391574561e225bc86830c99f9af93bbd61cf67ef3d496e5e9e5e4b47774167b", 0x83}, {&(0x7f0000000740)="35e69ef4351c90c399f6c301a0fec54058b6800265654306d705e15a83e7b674dd91da66ab337859e1fd8d0f6ce321b1bd0216166af203d63ddd50bb89c9fde5073558b1ed3c70c4c2ff81bfab81a461b1f931f392b0cbee4b17cf536e30af4afd90e357793c6832dcabbcf7a88b53d77e23e7264ea2", 0x76}], 0x4, 0xfffffffffffffc00) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@setneightbl={0x84, 0x43, 0x2, 0x70bd2a, 0x25dfdbfb, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x20}, @NDTA_THRESH3={0x8, 0x4, 0x7fff}, @NDTA_PARMS={0x54, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8, 0x8, 0x4d30a587}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x8}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x2ea60d32}, @NDTPA_GC_STALETIME={0xc, 0x6, 0xd916}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x1ff}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x4}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x1}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x1}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x40}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800ff0f00180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00b74000000000cc"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff010000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000280)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{}]}}]}}]}, 0x44}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:44:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0xffefffff, 0xc, 0x2011, r0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x530, [0x0, 0x20000440, 0x200006b4, 0x200006e4], 0x0, &(0x7f0000000040), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x8, 0x2, 'geneve0\x00', 'macvlan1\x00', 'gre0\x00', 'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff], 0xae, 0x12e, 0x15e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x3, 0x5, 0x3, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}, @common=@log={'log\x00', 0x28, {{0x3f, "25bc4c46de7ef7c59b7b0671e43050799df0b887d2371417f7dfeb6bfe78", 0xc}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}, {0x5, 0x20, 0x15, 'macsec0\x00', 'veth0_to_batadv\x00', 'syzkaller1\x00', 'bond0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x80, 0xffff, 0x9, 0x0, 0x0, "48f88ff8ecbed2d33a16fc583a2c3a0ccf36ad03281f45544330c285b11873d1e36196998a54b82a1caff36f4494138257576c5aa250b68594e8ed0095ce8714"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x37, 0x11, 'vxcan1\x00', 'gre0\x00', 'bond0\x00', 'macvlan1\x00', @random="3642fdbf9398", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xa6, 0x11e, 0x16e, [@realm={{'realm\x00', 0x0, 0x10}, {{0xffff1489}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x4, {0x9}}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x26}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x3, {0xfffffffffffffff7}}}}}, {0x11, 0x9, 0x1c, 'sit0\x00', 'rose0\x00', 'ip_vti0\x00', 'bridge0\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x7f, 0xff, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x9, {0x86}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}]}, 0x5a8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f00000000c0)=""/236, 0xec}, &(0x7f00000001c0), 0x9}, 0x20) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000a40)='SMC_PNETID\x00') shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r5, 0x3f}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0xa2}, &(0x7f0000000340)=0x8) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7010fbdbdf250200000005000400020000000900030073797a31000000000900030073797a31000000000900010073797a3200000000140002007465616d5f736c6176655f30000000000900010073797a30000000000900010073797a31000000000900030073797a3200000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x10) mmap(&(0x7f0000c83000/0x4000)=nil, 0x4000, 0x1, 0x50, r1, 0x0) 18:44:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x21, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000003440200bfa30000000000000702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff7d640200000000006502030004be01000404000001007d60b7030000001000006a0a00fe00000000850000002b000000cf000000000000009500000000000000a81bbfa3980de7b0efc5733ed236e4add6de094e0832aaa6912a8b2c0000000041e41f44ae7c5e84e6e3a94b574f2edfa38ccb15f1cb24421d394fcf860db509000000de2243533ef6d62a46b3009a54f4fd7db0d4968a384b0f59c7919b10a43b0958acbdd1a81ae9022bd9997254eee423899d5fdb68832e9864", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], @ANYRESOCT], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 18:44:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000017c0)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r4, &(0x7f000000ac80), 0x66, 0x0) [ 2043.098015][ T4742] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7a}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2043.197589][ T4745] dccp_invalid_packet: P.Data Offset(9) too large 18:44:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x5, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000040)={0x35, "c31e08147e009635c27080321108758a619e449f4c62f3392815dd4bc8ad6d34c94904711ab26a0c117d14507a6e3a4d223d1816f17c5dc14af60d9c7953134d5112b4c69dddfcf90e54c02ec3395526be32e13bf3f69c3828c90d6a819389b22e205544af73793911e419a3416f955c203b7d9a5acffc62fd6b78ffc0d86aab"}) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x4014) 18:44:36 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x148, 0x148, 0x0, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x21}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0x0, [], [0x68]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) 18:44:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x85}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2043.474513][ T4768] No such timeout policy "syz1" [ 2043.507206][ T4771] No such timeout policy "syz1" [ 2043.807444][ T4765] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2044.037934][ T4783] dccp_invalid_packet: P.Data Offset(9) too large 18:44:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x9, "1000"}}}}}, 0x2e) 18:44:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018004001d00d1bd", 0x2e}, {&(0x7f0000000140)="95ff48a4e5089f9140948c3f2d3e00f41664c2a153d833b3be52d21c8e5bdec60f2298e1196ab214728c8cdce5db6cb5757b8c6f9f51b94df88cda2c316a374267e0a7702716222cdebdf47b16e24bd55cf5b78718a92a7177046f9df342f70a9d06fe9a554eb22b5c2b41abec314681d534d2bae5a432edceac89d40dbe5424a073333db8ada49e4bc9e886fb37b6d0e6b778da0062ab6b78695e205cf3a3899b9447828bc3bbc3afe091d1d7aa3d07259f91c443b7", 0xb6}], 0x2}, 0x0) 18:44:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xb0}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:37 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)) r2 = accept$ax25(r0, &(0x7f0000000000)={{}, [@remote, @bcast, @bcast, @default, @rose, @remote, @default, @default]}, &(0x7f0000000080)=0x48) getsockopt$ax25_int(r2, 0x101, 0x0, 0x0, 0xffffffffffffffff) 18:44:37 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) bind(r0, 0x0, 0x0) [ 2044.536051][ T4800] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2044.536548][ T4796] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 18:44:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf0}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2044.610736][ T4804] dccp_invalid_packet: P.Data Offset(9) too large 18:44:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x8, "1000"}}}}}, 0x2e) 18:44:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x114}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x192}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x195}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2045.091828][ T4817] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2045.452508][ T4846] dccp_invalid_packet: P.Data Offset(9) too large 18:44:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0xa, "1000"}}}}}, 0x2e) 18:44:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000006900000000280012800a00010076786c616e000000180002801400130008000000a19c324dec3fab0ebbc757c7a27f458168a5d7a12af6e6cebbba3a6b286cc70230251b0cfaec50864ce4e23dabdda2e67d7a4e7d06c890f9a743e6f136", @ANYRES32=0x0, @ANYBLOB="0120000000000000"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) clock_gettime(0x0, &(0x7f0000006600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000040)=""/111, 0x6f}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/135, 0x87}], 0x6, &(0x7f0000000540)=""/234, 0xea}, 0x9}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/164, 0xa4}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000a00)=""/54, 0x36}, {&(0x7f0000000a40)=""/225, 0xe1}], 0x7, &(0x7f0000000bc0)=""/230, 0xe6}, 0x1}, {{&(0x7f0000000cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/132, 0x84}, 0x2}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000ec0)=""/205, 0xcd}, {&(0x7f0000000fc0)=""/153, 0x99}, {&(0x7f0000001080)=""/121, 0x79}, {&(0x7f0000001100)=""/246, 0xf6}], 0x4, &(0x7f0000001240)=""/4, 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/182, 0xb6}, {&(0x7f0000002340)=""/41, 0x29}, {&(0x7f0000002380)=""/131, 0x83}], 0x4, &(0x7f0000002480)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003480)=""/167, 0xa7}], 0x1, &(0x7f0000003580)=""/140, 0x8c}, 0x4}, {{&(0x7f0000003640)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000036c0)=""/146, 0x92}, {&(0x7f0000003780)=""/115, 0x73}, {&(0x7f0000003800)=""/228, 0xe4}, {&(0x7f0000003900)=""/212, 0xd4}, {&(0x7f0000003a00)}, {&(0x7f0000003a40)=""/204, 0xcc}, {&(0x7f0000003b40)=""/83, 0x53}], 0x7, &(0x7f0000003c40)=""/150, 0x96}, 0x3}, {{&(0x7f0000003d00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000003d80)=""/192, 0xc0}, {&(0x7f0000003e40)=""/20, 0x14}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/245, 0xf5}, {&(0x7f0000005f80)=""/8, 0x8}], 0x6, &(0x7f0000006040)=""/207, 0xcf}, 0x40}, {{&(0x7f0000006140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006340)=[{&(0x7f00000061c0)=""/251, 0xfb}, {&(0x7f00000062c0)=""/58, 0x3a}, {&(0x7f0000006300)=""/64, 0x40}], 0x3, &(0x7f0000006380)=""/16, 0x10}, 0x3f}], 0x9, 0x2000, &(0x7f0000006640)={r2, r3+30000000}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000066c0)={0x0, @sco={0x1f, @none}, @l2={0x1f, 0x2}, @xdp={0x2c, 0x0, r4, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x80, &(0x7f0000006680)='veth0_vlan\x00', 0x400, 0x81e, 0xffff}) 18:44:38 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a130000", @ANYRES32=r5, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) bind(r2, &(0x7f0000000140)=@xdp={0x2c, 0xc, r5, 0x38}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2807000010005fba0000e89f1c05dbaa94000000000000000048a7", @ANYRES32=0x0, @ANYBLOB="03009f880400000000000008001b0000"], 0x28}}, 0x0) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r6, &(0x7f0000003340), 0x3) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r7, &(0x7f0000003340), 0x3) getsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) 18:44:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x198}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x8, "1000"}}}}}, 0x2e) [ 2045.898239][ T4859] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 2045.956390][ T4858] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2045.968141][ T4862] IPVS: ftp: loaded support on port[0] = 21 [ 2045.981897][ T4868] dccp_invalid_packet: P.Data Offset(9) too large 18:44:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x48, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x211}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x222}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2c2}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2fc}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2046.566079][ T4874] can: request_module (can-proto-0) failed. 18:44:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x300}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2046.773346][ T4892] IPVS: ftp: loaded support on port[0] = 21 [ 2046.784566][ T4877] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2046.795290][ T4897] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 2046.883026][ T4908] can: request_module (can-proto-0) failed. 18:44:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x10, "1000"}}}}}, 0x2e) 18:44:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x334}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4c, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2047.546978][ T4955] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2047.547189][ T419] tipc: TX() has been purged, node left! [ 2047.633775][ T4958] dccp_invalid_packet: P.Data Offset(9) too large 18:44:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000001a40)=0x4) sendfile(r4, r5, 0x0, 0x100000001) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_newneigh={0x4c, 0x1c, 0x20, 0x9, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x80, 0xa, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x4}, @NDA_VLAN={0x2, 0x5, 0x2}, @NDA_MASTER={0x8, 0x9, 0xf432}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_SRC_VNI={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x48880) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2f}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) 18:44:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000006900000000280012800a00010076786c616e000000180002801400130008000000a19c324dec3fab0ebbc757c7a27f458168a5d7a12af6e6cebbba3a6b286cc70230251b0cfaec50864ce4e23dabdda2e67d7a4e7d06c890f9a743e6f136", @ANYRES32=0x0, @ANYBLOB="0120000000000000"], 0x48}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) clock_gettime(0x0, &(0x7f0000006600)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000040)=""/111, 0x6f}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/135, 0x87}], 0x6, &(0x7f0000000540)=""/234, 0xea}, 0x9}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/164, 0xa4}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000a00)=""/54, 0x36}, {&(0x7f0000000a40)=""/225, 0xe1}], 0x7, &(0x7f0000000bc0)=""/230, 0xe6}, 0x1}, {{&(0x7f0000000cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/132, 0x84}, 0x2}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000ec0)=""/205, 0xcd}, {&(0x7f0000000fc0)=""/153, 0x99}, {&(0x7f0000001080)=""/121, 0x79}, {&(0x7f0000001100)=""/246, 0xf6}], 0x4, &(0x7f0000001240)=""/4, 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/182, 0xb6}, {&(0x7f0000002340)=""/41, 0x29}, {&(0x7f0000002380)=""/131, 0x83}], 0x4, &(0x7f0000002480)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003480)=""/167, 0xa7}], 0x1, &(0x7f0000003580)=""/140, 0x8c}, 0x4}, {{&(0x7f0000003640)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000036c0)=""/146, 0x92}, {&(0x7f0000003780)=""/115, 0x73}, {&(0x7f0000003800)=""/228, 0xe4}, {&(0x7f0000003900)=""/212, 0xd4}, {&(0x7f0000003a00)}, {&(0x7f0000003a40)=""/204, 0xcc}, {&(0x7f0000003b40)=""/83, 0x53}], 0x7, &(0x7f0000003c40)=""/150, 0x96}, 0x3}, {{&(0x7f0000003d00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000003d80)=""/192, 0xc0}, {&(0x7f0000003e40)=""/20, 0x14}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/245, 0xf5}, {&(0x7f0000005f80)=""/8, 0x8}], 0x6, &(0x7f0000006040)=""/207, 0xcf}, 0x40}, {{&(0x7f0000006140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006340)=[{&(0x7f00000061c0)=""/251, 0xfb}, {&(0x7f00000062c0)=""/58, 0x3a}, {&(0x7f0000006300)=""/64, 0x40}], 0x3, &(0x7f0000006380)=""/16, 0x10}, 0x3f}], 0x9, 0x2000, &(0x7f0000006640)={r2, r3+30000000}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000066c0)={0x0, @sco={0x1f, @none}, @l2={0x1f, 0x2}, @xdp={0x2c, 0x0, r4, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x80, &(0x7f0000006680)='veth0_vlan\x00', 0x400, 0x81e, 0xffff}) 18:44:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) 18:44:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x60, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x35e}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x11, "1000"}}}}}, 0x2e) [ 2050.513199][ T4995] netlink: 'syz-executor.5': attribute type 19 has an invalid length. 18:44:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3d4}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3ea}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3f6}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x68, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2050.709480][ T4997] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2050.722076][ T5006] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (257), value rounded to 0 ms [ 2050.818218][ T5007] IPv6: sit2: Disabled Multicast RS [ 2050.852733][ T5007] team0: Device sit2 is of different type [ 2050.935516][ T5057] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6c, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3fe}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:44 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/40, 0x10}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x13) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendto$packet(r4, &(0x7f0000000140)="58f64fad2769996ad092d4ad7e212be9eaaabc63054402b204b8258bf1ee6843af81c8d1632981ef2f2b8b754aec55634d87926647cde61deb3ed1ed8966cf817d07014602c7b1ad1c1ecfeed9ca29594eb210458f88895f0ca347880ae139dfc87303cfc2525af024ad2ba3d4a21287b0da8319c5ed01562799", 0x7a, 0x20000044, &(0x7f0000000200)={0x11, 0x18, r7, 0x1, 0x5, 0x6, @broadcast}, 0x14) read(r1, 0x0, 0x0) [ 2051.445809][ T5064] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x65}, [@generic={0x7, 0x9, 0x9, 0x4, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:44:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x500}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:44 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) sendto$l2tp6(r1, &(0x7f0000000000)="2cff3d76a9473f3460ee37a99759f7e427de063f74d979b98e72f43ee954059f51d734aa004eb973bfb80686a516f986b840beeddff2810a72962f20c08b906924179ffcb215976789b74c00cd50be43f7e3ae49b5dcd2c643b497c8ef1037209f2c4bdbecb2ec965fb7a25fd642903520c6c725e5e862197174a7e627f53be3ca8f254363158db2c4", 0x89, 0x20000005, &(0x7f0000000140)={0xa, 0x0, 0x666, @mcast1, 0x2}, 0x20) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @rc={0x1f, @none}, @vsock={0x28, 0x0, 0x0, @hyper}, @xdp={0x2c, 0x0, 0x0, 0x1f}}) 18:44:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x74, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2051.699183][ T5087] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x21, "1000"}}}}}, 0x2e) 18:44:44 executing program 0: r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) close(0xffffffffffffffff) 18:44:44 executing program 5: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bridge0\x00'}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 18:44:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x600}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7a, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB="154d61b80e929a0278dacd8a89a6f32bcaa734ff9c71fa2569b659af8c9b604ecbe99a2fb3099b4d308eddb1dd47169c369624ea0b8c44afea3be3"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) [ 2051.974479][ T5105] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:44:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x700}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x3, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2052.131601][ T5118] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2052.334721][ T5124] bond3: (slave bridge22): making interface the new active one 18:44:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xa00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2052.403790][ T5124] bond3: (slave bridge22): Enslaving as an active interface with an up link [ 2052.437704][ T5123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:44:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0xf, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x1102}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2053.171342][ T5124] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2053.241706][ T5160] bond3: (slave bridge24): Enslaving as an active interface with a down link [ 2053.282979][ T5180] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2053.313330][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:44:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x1401}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_emit_ethernet(0x24d, &(0x7f0000000200)={@local, @empty, @val={@val={0x8100}, {0x500, 0x0, 0x0, 0x401}}, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "b15aff", 0x20f, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, {[@dstopts={0x3a, 0x9, [], [@ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x3, [0x0, 0xfc]}}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x101}, @ra={0x5, 0x2, 0x100}]}, @fragment={0xc, 0x0, 0x7f, 0x0, 0x0, 0xd, 0x67}, @dstopts={0x3c, 0x4, [], [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x8, [0x0]}}]}, @dstopts={0x89, 0x8, [], [@jumbo={0xc2, 0x4, 0x97}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0xab, [0x7f, 0x6]}}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @remote}]}, @dstopts={0x5e, 0x4, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0xef}]}, @fragment={0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x67, 0x1, [], [@pad1, @ra, @enc_lim={0x4, 0x1, 0x6}, @pad1]}, @fragment={0x2, 0x0, 0xd, 0x1, 0x0, 0x13, 0x66}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x9, 0x0, "c3b516", 0x2, "c89ab5"}, "0bb8c4758d1025aa5f2cdae6cd8e687f3f513f334e794027ca5212f6dae43079ad4be1547d6a0d7c784409964ef796a4e9e0440e164b376a992938bc559d3de4c8c300e41ab5940d7531be9d3667373c139fd935723fe80cc7afe7d354607b732240350ca751210d2363fb59bfc9f56bfc004b41501ac6091a68c11c041f3bb6ff76bfb58ecf8efd7f31949f9e8eb4178c9ede14a82e4c6d5d7bfd4218059c2c30a31a011fb34eefb5048abcafdf4855d11b4e795f10b60f18a312e8f737a31d067995e9c61ae8"}}}}}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000b67000), &(0x7f0000000040)=0x4) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000b67000), &(0x7f0000000040)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast2}, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) 18:44:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x24, "1000"}}}}}, 0x2e) 18:44:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x5a, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB="154d61b80e929a0278dacd8a89a6f32bcaa734ff9c71fa2569b659af8c9b604ecbe99a2fb3099b4d308eddb1dd47169c369624ea0b8c44afea3be3"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 18:44:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffd2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000004c0)={0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast]}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x20008000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[]}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000040) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="80002860", @ANYRES16=r7, @ANYBLOB="040328bd7000fddbdf2504000000140001006d643573756d76626f786e6574312c00140001006b657972696e67736563757269747900080002000500000014000500fe8000000000000000000000000000bb1200010075736572286d643573756d5e5b00000014000600ff020000000000000000000000000001"], 0x3}, 0x1, 0x0, 0x0, 0x8800}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2ec6a2f8ad432e87e59f257db1bdf7bd45695a7b29d59255d2b84334c67000165ef5f27b8c1b7c9493ac02b5e69b2ed15d401cdec05a296810167ccfc235661ee2d56b4113026d0714b45e74ac749c94c1f2a592de8412d514f736144778ab6d91723e3e0c404782f938577070cce260fbd2aea136f52ace3af0bab6e71337e895210197ad664b09879b253979d39d8cc050669973b5662ddca10f050bb41eead2edc035232b45fb245e1f06b4fa0e207b585c965272e80be5031b369e763dd2c2223cddcbe286c284a4508b4926a25f8817fdb3379549c8c45076d6bd8ab265ab48094774ce52"], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7f, 0x0, 0xf4}) [ 2053.990180][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2054.030835][ T5214] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:44:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x73, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x1800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x801, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="6d616e676c6500000000000003d000000000a48681c50000000000000000000000800000060000009804000020020000c0000000800100002803000000000000000400000004000000040000000400000004000006000000", @ANYPTR, @ANYBLOB="ffffffffe0000002000000ffffffffff6272696467655f736c6176655f31000076657468315f746f5f62617461647600ff0000000000000000000000000000000000000000000000000000000000000029000332000000009800c00000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000200000000000000280045434e0000000000000000000000000000000000000000000000000000002000000000000000ac1e0101ac1e0101ffffffffffffffff7663616e30000000000000000000000073797a6b616c6c65723000000000000000000000000000000000000000000000ff00000000000000000000000000000008000120000000009800c00000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000017000000000000002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd0000000000000000000000000000000000007000a000000000000000000000000000000000000000000030005450524f58590000000000000000000000000000000000000000000000000600000001000000000000074e240000ac1414aa7f00000100000000ffffff00697036746e6c300000000000000000007767300000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00020200000000980008010000000000000000000000000000000000000000280074746c000000000000000000000000000000000000000000000000000000020000000000000070004e464c4f470000000000000000000000000000000000000000000000000000000000138b018001000000f8b61bd7a8f5186a24e59bc19b6e6459c5bcaae87d66da26aaa3c60d2ad09061581e552979c5ce9676deb45fb9948b93cba29a2545f82748af7d720736d8947b00000000ffffffffac14143affffffffff0000006d6163766c616e31000000000000000076657468305f746f5f6873720000000000000000000000000000000000000000ff0000000000000000000000000000002f00034000000000b000d80000000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000030000000100000001000000080000000700000002000000010000000304000028005443504d53530000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fe"], 0x3) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'caif0\x00', r10}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', r3}) [ 2054.278164][ T5220] bond4: (slave bridge26): making interface the new active one [ 2054.342201][ T5220] bond4: (slave bridge26): Enslaving as an active interface with an up link 18:44:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2054.402869][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2054.465778][ T5278] ipt_ECN: cannot use operation on non-tcp rule 18:44:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:47 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x6e) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98bd459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="829349182c00270d00"/20, @ANYRES32=r4, @ANYBLOB="0a00000000000000030001000b000100666c6f776572000004000200"], 0x34}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000), 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:44:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2202}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x12) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r3 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) getsockname$netlink(r3, &(0x7f0000001700), &(0x7f0000001740)=0xc) write$tun(r1, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 2054.959081][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2054.981077][ T5287] bridge23: port 1(syz_tun) entered blocking state [ 2054.994615][ T5287] bridge23: port 1(syz_tun) entered disabled state [ 2055.004873][ T5287] device syz_tun entered promiscuous mode [ 2055.068664][ T5278] ipt_ECN: cannot use operation on non-tcp rule 18:44:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x48, "1000"}}}}}, 0x2e) 18:44:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2f00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0xa, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000b53da15e73fad0869509efbebb2e5de5", @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700a8123a5fbc5afaf2d3a965ed03044aa0"], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {0x0, 0xffff}, {0xa, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8008) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x6c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000007640)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007600)={&(0x7f00000075c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000011) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r7, @ANYBLOB="af609a2141756829df1ffc34b88fd17ef1d8fd7b9ad0d3bc05c3740acf949d0c181c636fea596ac12930d8ac201c35bf7db07471b427908f7bf2d09475b19d05e6214c85afaca8ecc878bb66d917ee292536136991b13bbb11c0d998ed2b"], 0x3c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/vmnet0cgroup!\\lo^]wlan1j\x00', 0xffffffffffffffff}, 0x30) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3f, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000000408010200000000000000000c000002060002408035000054000480080001400000000008000140000000060800014000007fff0800014000000001080001400000010108000100014000001e81080001400000000508000140000000020c00048008000440000000010900010073797a30000000001c0004800800024000000007080001400000000708000140000000070900010073797a30000000000600024002000000292fb8d472ec973f2357b4ab493418c6aeb5b0c4eb40c1baab66c7f707b3be09ff3f8d7056a4bb133527eb5aad3c5d04e9b0388351be2b77c2bd72ed19b08afd1ca12ead01cdb070f4eef91285a2da77b0d0ee1bd7405a048269bdb863083b025a41acd0f22900e65cc7b4655c6f0e826f98e4146d57bbbc495e4668e15268127ea50fc37ac841a4c96a1e7a324156b3b1f7c5ee36a4ddbf141937a50b3782c3e4d3b27760025c35f14517992261c1ed26d306f625c3b31ab66fb471f5fbb83b0ef347d24921ef533e"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:44:48 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd90, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000507000000000000000072030000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x4c}}, 0x0) r0 = socket(0x11, 0x6, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000080)}], 0x1, 0x0) close(r0) 18:44:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2fff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100006002000a920a248c74eec32e2d91b02fa967d71fd35a6ff8a41128bd2ed2b2be3bac05eb90633d02070c650c5889ee03b549f2b6825f3cbe0cf"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 2055.703001][ T5347] validate_nla: 1 callbacks suppressed [ 2055.703012][ T5347] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2055.705539][ T5346] dccp_invalid_packet: P.Data Offset(9) too large 18:44:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x5a, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x74}}, 0x811) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000005c80143dc95d549023ba2b4f352b33af7b175915b0d0923e6a2ff32d6ab39db421825591be5fe34ab49348106fa1fda6327107de5a385296c6fae4b3b7f7635fd579fa6054dde374de74d5ada6fc6331cdd5585ffe17bacff93e7d3e225b7254", @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000001800018014000200767863616e3100"/38], 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r5, 0x9dc73aa45b619c0b, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}}, 0x0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000240)="cc34dd6c94e675694f553d60876a3729dfab5e55112b752c300e891799ecf44c4bd4f253c57c63689d55eabf60018d97875c09570fb84e") sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24058845}, 0x64040004) 18:44:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3403}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:49 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000480)=""/96, 0x60}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/174, 0xae}], 0x5, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="57ee41dea43e63a3f7fb7f11c72b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x39af, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x5}, &(0x7f0000000100)=0x89, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000680)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2056.291617][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2056.332701][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2056.354157][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2056.370907][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2056.479041][ T5384] dccp_invalid_packet: P.Data Offset(9) too large [ 2056.511110][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2056.533214][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2056.551240][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:44:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x4c, "1000"}}}}}, 0x2e) 18:44:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3c00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0124fc60100006400a0003000200000037153e370a00018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 18:44:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x13) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 18:44:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x63, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:50 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000006c00050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006c6f0000000000000000000000000000180034801400350000"], 0x4c}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, &(0x7f0000000000), 0x40800) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 18:44:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x6c, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3f00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2057.322055][ T5412] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2057.350120][ T5408] dccp_invalid_packet: P.Data Offset(9) too large 18:44:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) 18:44:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2057.493197][ T5412] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:44:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3f00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2057.952166][ T5414] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2057.967746][ T7383] device syz_tun left promiscuous mode [ 2057.973759][ T7383] bridge21: port 1(syz_tun) entered disabled state [ 2058.204290][ T5438] dccp_invalid_packet: P.Data Offset(9) too large 18:44:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x60, "1000"}}}}}, 0x2e) 18:44:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4c00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:51 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) vmsplice(r6, &(0x7f00000002c0)=[{&(0x7f0000001980)="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", 0x1000}], 0x1, 0x8) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x5ca64582dc2dfa20, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400070500000040075044b2f6000000", @ANYRES64=r7, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="20392ee8c004ebd562695238d768cfbf2d302f883e63826e58bd320521a944c7fef06b4198ca23dcd53333ac3e9f62f7f37d81d9b2e6eb275b07fafdfcf3a02c797ac80a341238d8ac66bc75eb921c97e8d981147fbe58a28825eb8a943f953a264a36a5672ffd030081ba3f1bbb42909d9817de196b9320ece32f43e0f7afef995a05a96df4ae47ac5fc5d9846b00a68b", @ANYRES64=0x0, @ANYRES32, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="253292a0fb2d1067fdcd4f5a4a6a6d3acd0a5fc3b94abf5e5444683f5984cb9ee2da00ac9dcaa53c97d4b4ade4574855012437bdc8c75551b499afb891df7dee16e946d8faabfea9a4bbe05c1a460b86a32215a999182644fbba9e438a7099de0055511de8cd2003c8ffcc63524bf1d1555ec8092472e641b0a1ffaefbde4ecb06c353ef1ebe14f0238d65b3c76b6954cff82a992495433e1489a68379550bf24a7bee32124704fcf0bb017c46cbd5b08f90"], @ANYPTR64, @ANYRES32=0x0, @ANYRESHEX=r2]], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002c00270d000091610000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008000000080001006270660018007760c19ffa069e5000000c0005000000000000000000f053"], 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:44:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="874b00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="c5820e08c543d1b66d30a16dd6e67f302087f184a5"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="20032cbd00fddbdf250700000014000c00620019009d007a0000000400006449d2e9f55a58b40e56fc00080005000a0000000800030000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYBLOB="6390841004fa9d635554bee890e3627fc1bcbb53f4826567c7eb5666b076a1aa7bc4d430288f0c7dd85046fe469fbb9a918c364b67c490e81bc2f3cacf10a8c182c383a0af347e88b9d979fa61a8087725a0820dec092b6f096efa5c85b243e400d00829cc59ee1825bb2cd7a749010b955c17c846d6a07072f959e29ad255f70f9a0ecc732fba12c8e4a6f3de5f83b3e74f316a1143", @ANYRESOCT], @ANYRESOCT, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYPTR64, @ANYRESHEX=r1, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYBLOB="6e191eaad1f6f433a6035c451d4863", @ANYRES32=r0, @ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT], @ANYRESOCT, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYRES32, @ANYPTR64], @ANYRESOCT], @ANYRES32=r1, @ANYBLOB="ccbc61a29e32917de359fa50376a51945ded71ecfa77636dc3ebfb0f581dfeb67eb129e6870d9fcfe7d95ae495de4e36cf14265cfa609eef294536cd8dcc91a182112d2302d9c4cc98e6a641664d3aeb2c5b9d109214bf47cb2e3b2673eaa76bb0961967781c2f94ad438ddc487c6caa319e02869823307548adfa2d277debaef41642ae7ffdd4aacd4c257e1e137d7229141f5afd693cf58e97eab2dd1f83cc7fb8cc9ddac424d640571871ec587c29463e3f96f69a639ffc262532aad4941ea114faed66a92e9060da4e7c463cdbf5f7be4f09f8ff50c0", @ANYBLOB="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", @ANYPTR64, @ANYRESOCT, @ANYRESOCT=r0], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="d61bb7c50edaf322d9996a5e60120164f07dd05998571b033dddef74d88f61f2a1369661456c72e4abe2a5ab404b4f6d7090038f84afbda9d2ba0451f8277e4dc7c5c6b2d8fa4c0759"]], @ANYRESDEC], 0x5}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4042040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr="bca53c5a6562b53c574ff797a9f4197c"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) [ 2058.928525][ T5456] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2058.962413][ T5457] IPVS: ftp: loaded support on port[0] = 21 18:44:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x5000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2058.988440][ T5453] dccp_invalid_packet: P.Data Offset(9) too large [ 2059.001252][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100005070a00000002da6e0600000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001500000000000a0001000080c2000000000008000a00", @ANYRES32, @ANYBLOB="824b135e6addce890bbe69e9f2b8463f4308a6a607411ff6b9d07b9d3c865622c9694740296dd99c86b13af26bf0dfa7"], 0x50}}, 0x0) socket(0x10, 0x8000000000000003, 0xfffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x2004) 18:44:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x2], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2059.205383][ T5478] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2059.319549][ T5478] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2059.616248][ T5481] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2060.047457][ T40] device  left promiscuous mode [ 2060.525945][ T40] tipc: TX() has been purged, node left! [ 2060.878334][ T5535] IPVS: ftp: loaded support on port[0] = 21 [ 2061.075171][ T5535] chnl_net:caif_netlink_parms(): no params data found [ 2061.187283][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.195128][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.204760][ T5535] device bridge_slave_0 entered promiscuous mode [ 2061.216933][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.224593][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.234819][ T5535] device bridge_slave_1 entered promiscuous mode [ 2061.270146][ T5535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.284518][ T5535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2061.335005][ T5535] team0: Port device team_slave_0 added [ 2061.360646][ T5535] team0: Port device team_slave_1 added [ 2061.397665][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2061.404840][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2061.433368][ T5535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2061.449576][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2061.456865][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2061.487168][ T5535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2061.590428][ T5535] device hsr_slave_0 entered promiscuous mode [ 2061.656272][ T5535] device hsr_slave_1 entered promiscuous mode [ 2061.715791][ T5535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2061.723653][ T5535] Cannot create hsr debugfs directory [ 2061.999595][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2062.025029][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2062.034902][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2062.051017][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 2062.075452][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2062.087580][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2062.098515][T20200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.106094][T20200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2062.122121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2062.136890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2062.147637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2062.157495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.164784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2062.190765][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2062.201927][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2062.211960][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2062.225256][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2062.246519][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2062.256486][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2062.266949][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2062.294876][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2062.304177][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2062.331153][ T5535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2062.345219][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2062.362301][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2062.371958][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2062.412567][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2062.422908][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2062.441841][ T5535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2062.575230][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2062.607086][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2062.619136][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2062.629139][T20200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2062.643327][ T5535] device veth0_vlan entered promiscuous mode [ 2062.666713][ T5535] device veth1_vlan entered promiscuous mode [ 2062.709738][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2062.720341][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2062.730550][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2062.744144][ T5535] device veth0_macvtap entered promiscuous mode [ 2062.754035][T17696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2062.770862][ T5535] device veth1_macvtap entered promiscuous mode [ 2062.812401][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2062.824499][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.837841][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2062.849886][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.860916][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2062.873400][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.884745][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2062.897450][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.909090][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2062.920290][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.933155][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2062.942674][T15291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2062.954451][T15291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2062.969560][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2062.981389][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.991937][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2063.002615][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.012959][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2063.025178][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.037177][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2063.048427][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.058694][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2063.069896][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.084287][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2063.094171][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2063.104500][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2063.414128][ T27] audit: type=1804 audit(1585939496.305:965): pid=5741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/0/cgroup.controllers" dev="sda1" ino=16921 res=1 [ 2063.489003][ T5741] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 2063.501719][ T5741] File: /root/syzkaller-testdir368177740/syzkaller.qbcnAu/0/cgroup.controllers PID: 5741 Comm: syz-executor.3 [ 2063.985977][ T40] IPVS: stopping master sync thread 23749 ... 18:44:57 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfba1133f8fc07f7b, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 18:44:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x5e03}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'wg1\x00', 0x81}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) [ 2064.123095][ T27] audit: type=1804 audit(1585939497.015:966): pid=5742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/0/cgroup.controllers" dev="sda1" ino=16921 res=1 18:44:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x68, "1000"}}}}}, 0x2e) 18:44:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x3], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:44:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="070000002dc356f961161a8200280000000000119078ac141400ac1414bb0d009078001100000000000000000000000000008420ba481634c784a4acc8831ce048f6bc510c7d1d793e6e841ab4b1c32b2e848baa80e331186563ef65848bea5be00fb9c8b2be421c419ed9715a662d4243831c63d3988f4c755640cd49fbfbe54f166166d30e8cfc5f4cdcc2966a59950018d06ee08a587fe1fffd06e4fa0307ae1da0e134bfb825bc4aaab6f627752e7df06f22004acf98abea43813a7519fe20e61ec8283668969db1f030a85ffa0eba139bcf9fb1cf0741439f6dc443c9e5f7141fb49af342055d1ddc9697839a0606e32af5216dbfaddf39b019635e49370851ca9ff26a14c4f0957d866543479498a3ff46e0a026eee5806f6947d373d5e7ea25929f4b62d50daa226b6bce15cf8173330b4d91205ac34a28d26c7ef684fd91df8cb93db6e1b6d616d1d938508f02e1f3e26d59a7570e254d852d8beb666e2b454770fc975eabf1e9dd632af0471dfa572c0c5bf66d0cee393f7c2d731aae6e1a34219c511bec1d9208e91b1ba30f394e80a7876543758908b482303f6dd57b33f1bdd589d412b1"], 0x100c) [ 2064.293256][ T5750] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2064.294913][ T5749] dccp_invalid_packet: P.Data Offset(9) too large 18:44:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:57 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="317a114803e6e460e9a202cab25929a8", 0x4, 0x0, 0x0, 0x10, 0x4c8, 0x80}, 0x20) r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) connect$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]}, 0x48) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:net_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x33}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:root_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000000) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f0f0", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0xfc, [], {0x0, 0x6, "711592", 0x0, 0x32, 0x0, @ipv4={[], [], @loopback}, @local, [], "abf2f7a326ec40b9"}}}}}}}, 0x0) [ 2064.348741][ T5762] skbuff: bad partial csum: csum=63830/5729 headroom=64 headlen=3712 18:44:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x4], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2064.418640][ T5764] IPVS: ftp: loaded support on port[0] = 21 18:44:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6100}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6300}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:44:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2065.180176][ T5789] IPVS: ftp: loaded support on port[0] = 21 [ 2065.415651][ T5777] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2065.475453][ T5803] skbuff: bad partial csum: csum=63830/5729 headroom=64 headlen=3712 [ 2066.209507][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.228915][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2066.240587][ T40] device bridge_slave_1 left promiscuous mode [ 2066.253917][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.828270][ T40] bond4 (unregistering): (slave bridge26): Releasing active interface [ 2066.988580][ T40] bond4 (unregistering): Released all slaves [ 2067.127270][ T40] bond3 (unregistering): (slave bridge24): Releasing active interface [ 2067.357143][ T40] bond3 (unregistering): (slave bridge22): Releasing active interface [ 2067.490876][ T40] bond3 (unregistering): Released all slaves [ 2067.657650][ T40] bond2 (unregistering): (slave bridge20): Releasing backup interface [ 2067.818002][ T40] bond2 (unregistering): (slave bridge19): Releasing backup interface [ 2067.958274][ T40] bond2 (unregistering): Released all slaves [ 2068.348717][ T40] bond0 (unregistering): (slave bridge15): Releasing backup interface [ 2069.657810][ T40] bond1 (unregistering): Released all slaves [ 2069.730333][ T40] device veth7 left promiscuous mode [ 2069.794996][ T40] device veth5 left promiscuous mode [ 2070.251651][ T40] device hsr_slave_0 left promiscuous mode [ 2070.295695][ T40] device hsr_slave_1 left promiscuous mode [ 2070.408786][ T40] team0 (unregistering): Port device team_slave_1 removed [ 2070.425261][ T40] team0 (unregistering): Port device team_slave_0 removed [ 2070.441679][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.485566][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2070.643926][ T40] bond0 (unregistering): Released all slaves 18:45:06 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="e80000001200d1c20000000000000000647262675f70725f6374725f6165733235360000000000000000000000000000000000004a1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006850c0aa0000000000000000000000000000000500000000000000000000004000000000000500"/232], 0xe8}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@upd={0x100, 0x12, 0x2, 0x70bd2c, 0x25dfdbfe, {{'morus640\x00'}, [], [], 0x2000}, [{0x8, 0x1, 0x80000000}, {0x8, 0x1, 0xe36c}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000005}, 0x40098d1) 18:45:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6c00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x5], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="002b800000000000b60f0e9b9338a62f83bdcc8487a860b0def748c31eed8b987b11a00b44c3b157177f41ce458ae70fdce74b371c01000000000000007fc20a1d02f341b5a4c802dde357"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYPTR, @ANYRESOCT=0x0, @ANYRES64, @ANYPTR, @ANYRES16=r0, @ANYPTR64], @ANYRES64, @ANYRESOCT, @ANYRES16=r5], @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000", @ANYBLOB="d612a1abd2b0c0a5c7253e9d70eb06fa60e077779df36653b0248721fa2887c1e796f6a8162323208604033531936316d9776f8a1c643c12cbb5941dba0fe48ea05f3364dc3d4089c64f39d72fa1725415c884155cedde896a3ca71ee2a441ec136cf95d418547f8c7931f50336610ac715d9db2bee3"], 0x4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x0) 18:45:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e6ffffffffff28004b4a940d32376a98e10000370000"], 0x18}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000b67000), &(0x7f0000000040)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@local, r4}, 0x14) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0) 18:45:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x6c, "1000"}}}}}, 0x2e) [ 2074.051693][ T5886] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2074.067410][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7100}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2074.102864][ T5891] device veth78 entered promiscuous mode 18:45:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x1, 0x0, "e43f15", 0x2, 0x3f}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x41) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) accept4$alg(r2, 0x0, 0x0, 0x81800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0xff4d) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x1, 0xea, 0x4, 0x5}, {0x9, 0xf4, 0x0, 0xfffffffa}, {0x1ff, 0x6, 0x7, 0x6}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x12012, r5, 0x75e0c000) write$cgroup_int(r5, &(0x7f0000000200), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$void(r6, 0xc004f0d9) [ 2074.143400][ T5893] dccp_invalid_packet: P.Data Offset(9) too large 18:45:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x6], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7300}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001300dbff0000000000000000cfa3f9a0b9067258"], 0x18}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="af609a2141756829df1ffc34b88fd17ef1d8fd7b9ad0d3bc05c3740acf949d0c181c636fea596ac12930d8ac201c35bf7db07471b427908f7bf2d09475b19d05e6214c85afaca8ecc878bb66d917ee292536136991b13bbb11c0d998ed2b"], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/vmnet0cgroup!\\lo^]wlan1j\x00', 0xffffffffffffffff}, 0x30) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r6}, 0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={r4, r5, r6}, 0xc) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924925b9, 0x0) 18:45:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7400}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) poll(0x0, 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x20010000) sendmmsg$inet6(r1, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x20000040) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x68, r3, 0x320, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xe454, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x11) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socketpair(0x18, 0x0, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, 0x0, 0x20040004}, 0x10000004) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x7c, 0x10, 0x8, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2b, 0x20004}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_FWMARK={0x8}]]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vxcan1\x00'}, @IFLA_MASTER={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) [ 2074.569611][ T5914] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) sendfile(r2, r1, 0x0, 0x80000001) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) 18:45:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000), 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000dcebcaf44a964e9e5bab817ba32857df1c9c92b3aac2836cafca0f9c42214a561c5f7d31cd1cc532267d54e6b935e8d165a1b49c342f1cfd72bafef3449e300c605174584a0f1882970bc81e1cc4e0d393f797285c3ea608147e251e", @ANYRES16=r4, @ANYBLOB="3f02000800000000000001000000000000000c41000000e08ca8096a14001462726f6164636173742d6c"], 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 18:45:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7a00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x7], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2074.787745][ T27] audit: type=1804 audit(1585939507.676:967): pid=5938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/4/memory.events" dev="sda1" ino=15851 res=1 [ 2074.835435][ T5939] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2074.866348][ T5943] dccp_invalid_packet: P.Data Offset(9) too large [ 2074.948893][ T27] audit: type=1800 audit(1585939507.676:968): pid=5938 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15851 res=0 [ 2075.045565][ T27] audit: type=1804 audit(1585939507.676:969): pid=5938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/4/memory.events" dev="sda1" ino=15851 res=1 [ 2075.127089][ T27] audit: type=1804 audit(1585939507.726:970): pid=5937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir621959818/syzkaller.KxCsnB/1422/cgroup.controllers" dev="sda1" ino=15844 res=1 [ 2075.252415][ T27] audit: type=1804 audit(1585939507.766:971): pid=5946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/4/memory.events" dev="sda1" ino=15851 res=1 [ 2075.515077][ T27] audit: type=1804 audit(1585939508.406:972): pid=5946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/4/memory.events" dev="sda1" ino=15851 res=1 [ 2075.547399][ T27] audit: type=1804 audit(1585939508.426:973): pid=5955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/4/memory.events" dev="sda1" ino=15851 res=1 [ 2075.577014][ T27] audit: type=1804 audit(1585939508.436:974): pid=5938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/4/memory.events" dev="sda1" ino=15851 res=1 [ 2075.601462][ T27] audit: type=1800 audit(1585939508.436:975): pid=5938 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15851 res=0 18:45:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x74, "1000"}}}}}, 0x2e) 18:45:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x2) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="240000001e005f0214ffffff01800000000000000000000000000000080008000d000000", 0x30c) 18:45:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x8500}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0xf], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'macvtap0\x00', {0x80000000}, 0x9}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="080db5055e0bcfe847a071") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x78, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000043) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 18:45:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x0, 0x40, 0x2c, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001c00)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "b94db81fefe0d02a3a26cf81f9fd5742b9585429bae11f070481c3d9746a13e8f8"}]}, 0x3c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000900)={@mcast2}, &(0x7f0000000940)=0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a00)={0x4c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) [ 2075.740243][ T5964] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2075.772754][ T5967] xt_l2tp: wrong L2TP version: 0 18:45:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x9201}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x48], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:08 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose}, [@rose, @rose, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose, @rose, @null]}, 0x48) unshare(0x40000000) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0xfffffffffffffedc}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x4e21, @dev}}}, 0x88) r1 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280)=0xffffff93, 0x4) [ 2075.833503][ T5972] dccp_invalid_packet: P.Data Offset(9) too large 18:45:08 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000002110500800000000ad000000000000009700000000000000c51330c4e960938d69745cbbb12df04be19f277a96066780888af274267c4fe3dcbd63ecb7dc9448b5d794fbc0877be0e04b2070b3586368dcfc7f09e28b6e10c11d1a3b67cb7ed3167b5c42aa955bedcfb6c8651247f200f1dbc643e4b670a67432a5daae729c79e1ae17ca567dc9f23a18264409be10c19233cff5bb5024b2eccbc5d6a03da2f4eadb1d87096c5908e957309de8bc2b6fb5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x78) 18:45:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x9501}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2075.984986][ T5984] IPVS: ftp: loaded support on port[0] = 21 18:45:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x9801}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2076.462775][ T5981] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2076.589374][ T5987] IPVS: ftp: loaded support on port[0] = 21 18:45:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x7a, "1000"}}}}}, 0x2e) 18:45:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xb000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:09 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000002110500800000000ad000000000000009700000000000000c51330c4e960938d69745cbbb12df04be19f277a96066780888af274267c4fe3dcbd63ecb7dc9448b5d794fbc0877be0e04b2070b3586368dcfc7f09e28b6e10c11d1a3b67cb7ed3167b5c42aa955bedcfb6c8651247f200f1dbc643e4b670a67432a5daae729c79e1ae17ca567dc9f23a18264409be10c19233cff5bb5024b2eccbc5d6a03da2f4eadb1d87096c5908e957309de8bc2b6fb5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x78) 18:45:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x4c], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:45:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x7, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "5129ea9a5d898608", "e6375263ad177008b0df4ec8c193b8ab", "8f315db0", "ab90a921a4d4b488"}, 0x28) 18:45:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xc202}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2077.091938][ T6060] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x60], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:10 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x82051, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x14, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r5, 0x101}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x10000000000000) [ 2077.210166][ T6068] dccp_invalid_packet: P.Data Offset(9) too large 18:45:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xd403}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB="5860a3a84d3dd34b3e63da5751308151ed2fbfccee70f1846f072ec5b8a049774db0e766080000000000000062a5b98808912d17e5f408625e59fd7f93fa86f48b4c2f4b8b8ff79c6a15d43f2ee59ba3b3bd96ee883e24af4aef4a22b52d92eb6df8"], 0x3c}}, 0x0) 18:45:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffb}]}}]}, 0x38}}, 0x0) [ 2077.488519][ T6085] IPVS: ftp: loaded support on port[0] = 21 [ 2077.883622][ T6077] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2078.072852][ T6085] IPVS: ftp: loaded support on port[0] = 21 18:45:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x97, "1000"}}}}}, 0x2e) 18:45:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xea03}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x68], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004c647a11a727e7000000000000000000631128000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x14, &(0x7f00000001c0)={r3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r3, 0xfff}, 0xc) 18:45:11 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05"], 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x7}) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r5, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000016c0)={0x80, 0x0, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x80}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x4c, r6, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, 0x0, 0x20008801) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000580)="1ee7f5c114f301897833b4ee5be81e76b0076a46b2f7468ac5628e1a4502b57bb5f20e619b8a81fcb84e9ea4131068bf3aed3b7f0e007ddc92d0785cccca837fb113143bcacf5837ecb45ea8cec8471e0d89d488e6d3c581377665cd9521f2be87e400768b0b1de3b80e0aa35daadea65ee311e7250176bcf7c2a2acf8c1599c8dca183eb4d5337526f9d9e845777c4a9aaaad56d2312b5fe498fce90a66ffadc8d2308fa680da948fe4ea290f5c7fd8e9b3ea5e7903e5d594493ead330bb69afbfe0e6b6abb875ae494983d07f6ad0f205c78e766519378c4e107daea6c96e9a4670308823ca2dd0833422d9db3994f3e7d334239a907c30f07719b225ab969f2f94f771caebc2a93c7eb7e3b1bc89cf230e44b16c1089a3650854aeb790527e2ed4cf2423ae96d49341984278612080fa8e37f942157bf6c91c5624514d54a81b13f59c05b2fa88691e49febd3783222666f2fdef3c186d2351aa606799e81ea0fb2e5ec9fc177a5bf680a2d762ea95132d0f6a03c26ce673432fa6e2a3dc43382ecce2ac519f2c6b46be91be490c2f8fcb9a6e8406c539141dab66863cbff550b2c87cb28579e20aaa73cd3b31fe5727fa1ce0f3553eea94404c7c57eec102cdeba890c61a16a193dc547cc0bb4e47fa3ff2a4688595ea0b11ccb246738dfd6a1c3068d96bb66a5dc78beb2e393ceebca4f0732b105066a1c245ee81c73d596167c0fc3e951dcac688e3409540babf69ccec8bce750e45b3c4d6e62e0a5e29bc0125425dfddd6be09a325363b9bb828e6fe6872b56058f1132fef1c61c1f236c5a06b27537d71a850d604c5219eb4df9057354cef00e70309da12e213d9961917278423df7c3ab98624768f25ef4e88555564dc322a87d934d9ad0de3f1e39c5f946b802139de1d05d9460ad7e978b26f01facea7a2acc23f1137b39f6442d60d38847641775907f0e9a97fb082d8882993135a90a98e1585783d5dc572a7c973f52cd92d190cfdb4e76171a4244af33ec5e08b831e992cbbeabe0826a842ae97e1b3007afe805879996243a1b2d38984f79638b8f59fffa2c58325b1905ba01c59f6880d4694eb554634ba67f55d888174f612a9bfe525eb15c140bfee07a90507398443413579f37a54650fefc53f14a879a5b857a1b8c6e38e91cc2540202cef81a51492698c3440cca2b6b100706a07da142f168d7819ebf95e7e8b90ae2f0873e3081a94aeef87152dabafccc7fd633e452b7ab28a3ed00ff0944cd23cd547989fc6a073bbf3b8013420eb018c7fdf288cd8e1a570e2671e5adf216b29f1c9c256fd50293da7dffd0b2cd186a8463c177738c74a8f2297ef231d316ce83b0f80b31c084f4d7d8fa5b38b6fc3d99969966900fb80412faf568caf6858cddf0df0a6a475e54e97a406a399e9a03e683ecaf46dcd8fc1333001c60fa107deb60bc3be8f57164aa6de9837459703db42ea692cdcfbf0d9ef1c0bb2a678223b430a8158b413d823eb32e2cdf4a46daaa92f4dc2dea2e1e695bf9fbc9defc666031a350f611ffd7e31849571249b110b6f342133aa1bfd85b19228e9168c4716ed79cbc3660bc3f5074ef54d6a2a812c7cf8c45a34ed75d0fc5ee9f6d28d4a8cda52881d230238bc2d64074a8b4d74b93a3eba4d001f9287eae3d563f61221c62ceb067b0a4989f547e62c40f89401fb812715b256e4533218b9c110e4c2eb9ecfca5ff7f47280d0b3982614136cbac13da0ecb2dda3e183272b9d88a56f0b236d05eab7a2df18861b75b92d75271ac8cfdadb98485038255fcf58a507dbbfae77ecb40b6cc6d480abddafb148e82a3172c96654681e6c9bc2e33c5ea9ec6076d06fc49645e8f9a5c1508eb0d7f16b6001239604774e3f930da93b08753653058c5d30c8c05ffa5b7ff803406f71784a5e9953ee05011e9f43b4aa4701803b2d6565bd2e793f0652cbe64d90de7315c88be38c74824b31ae0ac98eb53b72d38633b57c079c6966694b50c3f9e597cd5e3554f84175c4baff9fbcf5d46fcc6da1a8bce3cfe069acc7c8b7868c14f6828bce0600359297c1a2e14045abcc89423004f40b1eccea9343b92ee66cbfb18ae8020d108b71a7fdbfa1c388bb61e5a88f09d540b353505ed53b295fbd74a6fb8b029692c2984750faee3ad0994fe1510c919130d9e8728ee0045dda84768e8305eb8e64edd2b656f7179b00cde3b5d06540f27c825cb76cea2b6897c8cd6dc6fae066d8c591c62a295417dc3d1830bf4b6df2c93a7a5c9cd638134dd4f11675bb4356519d954f212e8c81be12e276502e552157e3461b4bc57edcecf0de045b7e17ce92992a6918f56ed799f40900af58d30d3c41875a6e1ce1ec968359a91c7db681775ba97e50fc29ea0d61e8abfed0796b6459617243eb84342d1a6f80d7ddd5c9ef8eeaddee5e5af1a09c185b0c6f0499ca6641558cc9f0d68eb0d64db5be28c84f3f0b42bb8fa1a324b9fa0a3d643b8a2b338daa632a23a90d1408d69ee3cdc42340d3e6d849b8118c55d0956c287608129c0c223d97e11b7ac92d50ddd334a64486bd3ca4a799c56dbf47612d53d04b85585f52870a8f3eb013399d770e062ca559253e3a9415c8f13c37d99033ffcb1e7aa4aa4d459e0d45526533f88e25498a128bb382fca690b954b0b1c5eda8f861bd646ad0cc0b3c3307fa0ca7c2f8bc75bf02b3b70ea9bb3a96dc3f7b2ceddc64d882230fd946fd8770e67461b07c6912b38fc7ee7cc61cf50cbaacafa9dae74938baa4d9d0f42c2b7dd260f55d69cd59695a801286a02e7b2f9babad3c4392f869cdf130ba44a7817f102d249753910d4cb1720496927f8bca22aad4e974a5d0eca972ab06e0659c0a50c76873b833cca0f848a902e7197d7de17677479fb19304a97fada0003e9da14b52213b2f773ea433cec51ed827c746526f80e1c83fc51071507f5ed580322c70d14a2f61e0d6f7ff5c1229cd18f911f9e12c81e446e0f9aa841375bd748565e3336592ca918eb7c1f4a53b7f6fa79433b740891f552272841a938659801430e334b6b07b0ce53374ba61e7670c0916bdcb72e8b4743ed1766e9de27740830803a2395c93c5a1f69eac4c63f1233aa0a0a5bfcfa245a48c102c9e269013f1e6232f68f2ff2b85de88dcd36551b33e0df4238f4b7fc1b0a085a64590638d1e5a33f629c50bd52b23d3e6e69e92de9c8b7fbf86f8a48fd295a7208ee5832902e5733f278b6aec017a6af96fd5f0edc684b64f98e2de1d8d2d123b342d371434edfdb8544c118f3f7de298de0791a1dab5fd57c226d4f9dd80fabf97b5f466d79d94082ea9a9187ed1522de02101fa392c37ae3685ba8d1364a1638736d2da2d02e898c5fa450787b3df83cdcb874aca56fb4f5bdc9bdc2e9ad9fe8c8656fa38d4e4108a743064dce0ae29c12d4bc7405b91108787fb01644486fbc4f025171f43b434d978155ace6410b002b3ab687dbbe293d63927b13f46a0ecf2eb713776a0d49933e4182d583040922944b64968a197e81d10ea61e9e94858a8dea185ba39199ce58707f481b2533db5ef4c9d23fb99af2216a16fadae47e2c02d9b194e82ffe1700261b643625c959d54027835bc9223e90172b424bc1e43c963011c6b99e5acad01af3887e7ae25c2d55cb343cf98abf597df0af80d6f125223af1320ebe321ef16b7e1468ff2ff5629358030fa4769f1a34f79042843fe34c0869d048af49f21efb9862d0bad4b656e4f50580e785fdf64abd80c30338c23ce0924eb15a81d8b8a53d98161689e1c65ad1d418b4465f253b3f5744d312e8797ae7ef4b02ddc3fe967d2f964a1982492091f291825e1b6bdbff55379e92326c02831ce60ee4726a0cab569013b4627715b18ccaa581423533a3b9fdd4bd31883c5ca7a4bd64e98991dd0945da4a93f10eaab9b78048b849afc46c6f821f0202c30cfa5269ed30bb5db43664c5a9446b251d6baef27bfb013480643538efabb2d68f35f58ecfa15e82df792ac98f2a91b1740295fbc75f72cc360d80c8ef3b625627b0d77c5c271016d0a2dccf356b1e4014c9ea0aa6a1994a58a76edaf81e4da523765a43a6ff55c8f50f36e21b3d424ae4d22bada8c82ff0c46b44047e2799c82833d55c7cdacf0f4eb56eec81194b56fe4dae86d6b435f8430597c21005411cc85bbd594730f9b6b32c7c77b11508892e7aa2b5f6462f9767b379ac728cff76d362111b1eadbfcc546a932fcb6eead0af287cab04923c17df8504200c7cc7e6b94edb1bbe38953b7161b4e060d01644a05260b5c5ed5939a82141b59699a65280aee4facde049af4cbabd7a924a3cb95ad8a88ba750c33671b8907384c80b7e9c7778f895aa4c940a03783e6b83e7277d095f640090b004a16e1db0440d04ba0d27a43fba1fcff2044132b4a43e302c28577a626e8d813701bb874aeb4834dfe4fce9e811b6c7b4be9ecd2824dd6e65388f3f8c723706710b40c12b2eb16d64119e70867878e3137932e626509b7d54fc653d501bd658bfaedf8c5001a3444c98fcfbd0a5d81fb40cabf4c7b78298992fd7f033f85175e156f5a0bc6afd1d72697729fcb80531b80a487e4e62d961e47c5459a71904f87d5d276dcbf2084f8d1f60830e73bd4769bfe5ab9e11c2d7a9cad1f3217ad363d492c644d7c8da4afe23eb654e89c473d6693e6b6b47efba48451231330639cc38f474494facfe4ccfd630d79cfe116d7e9d01cc44d60bedbd0b571d0a4acadde04e07d8257ff3b033df11c6b45d9a228d0df7486854451bbf63c4a7fce803cf946e73d341b6a6f13d168ac1679329eb456d7671308f466d423b93ff65d322fb5828f3d7bcd3e7b3edab2e0dff2dd0c9d5fa360a5045b072e166a78a37d5eb3519110a0bc561b2e1a515d3d199872bed29628b9ec1bb1ff3591672f7a2724f12786b7b76fcd5f527cc0f8a2ba7234e2a6af08dd7cbe9ad47f2449524d2b4d80606134e4cec65fca19a2841b0c671d8143722bc03fed54d6f4dcacdf759c2b9a58a6f57a7cb9362efaff5783b4a62649a17010f4df5ecc1637978d6915b84a96beb89d2eaede837568daa663d4fe0c5f620a387a414be97defbe842ebec2f3a393d039131c8c1adf2a6fbd672db32dff65f4202e848f5864860963fd78c91b6c3daae5faceef20aa79c6e58cf75ed31a30c4f1bee658bf3604c05cf0678b866605d0dfdea06089ac4f9c9b48c85001fb7055b91323330bb0f20e70a921e9fedd56b4417f65e5d5a7a70091ad74457a5ed496a43bebff391df1a0c804640170852fed4f9d67a09ffffd855f06b195949f3d10728a3abca346a504b4f06adde29cf25bbc1b8f67d57115980b51b9d4b97eb8f38f964ad77e3519e0f55a1cc9cca97c306af1c15922999f83ab69e9d31d27db236641f6f4e3c0c0f77f5ac239bd845e10cb1cbb8e30a33cce092c34960b6516623f8215db75a2bd2d1f40d4654d93343481153a62d0e14fe6c7b516f997693f922af2f539ba947bd78ff07edae96b4991586dab11330747c4bfb7e6141158d3d1919bae4cebc42fcae9f9bd5afa97aa780986b9b63d8c3468ced5c048a15d4fd6eca42c011f647c050e6bec74fedf0050d33b6a236f0fede42adbeefa8b27ae3529c704aa36919de44a107cf48273a4bcd3d957556e4cef5a4cde7d97a025dc065563a65c067423b7c55563e3c54922cc4dee577837e22158e594e347e980fc95bb6120eb6f03878011afcf17880b10c8944cec66069887771e0ef28f879f3fa4ea570d7359572a07b325910dc545", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 18:45:11 executing program 5: r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "ade6953d0e671a6fa30813a005a464c33b38b3d4113506263cbdb452c73a7d102382360bab595bd7a410f2c9e67995d527bdae198f06f677d81037931a9c60e621ee7eb86bbefd8048ca35ff986334abca15ccb8b12ed0e51fbddac8b9be26b1ad06cb15030b7ce9091621432892a5afd2acb31b8edf667bb53be43f6d82a5cc2b2b60826493efd81f11fd0e7130c872752062a5798d8f9ef5a14d1f5c21"}, @ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "02d1b1d946f21c5ed6cbbe0c6cc93dd2e517ebf4c1b07aab64e6853f6f165e268494c06d9046"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x35, 0x0, 0x0, 0x86040000}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 2078.715185][ T6163] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2078.751753][ T27] audit: type=1804 audit(1585939511.637:976): pid=6164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/8/memory.events" dev="sda1" ino=15892 res=1 18:45:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x6c], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2078.872975][ T6169] dccp_invalid_packet: P.Data Offset(9) too large 18:45:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000004c647a11a727e7000000000000000000631128000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x14, &(0x7f00000001c0)={r3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r3, 0xfff}, 0xc) 18:45:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x401, 0xfffffd33) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0xfff0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 18:45:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf603}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeef, &(0x7f0000000040)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x7fff, 0x6}, 0x1b}, 0x10) [ 2079.734680][ T6180] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0xe0, "1000"}}}}}, 0x2e) 18:45:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000340)="080db5055e0bcfe847a071") r2 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r4}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000000)={0x3, @null, r4}) pwritev(r0, &(0x7f0000003500)=[{&(0x7f0000000640)="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", 0x183}, {&(0x7f00000013c0)="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"/3862, 0xf16}], 0x2, 0x0) 18:45:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xfc02}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x74], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x0, 0x0, 0x11}, 0x4000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x8, 0x4, 0x1) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', r10}) sendfile(r2, r1, 0x0, 0x100000001) 18:45:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeef, &(0x7f0000000040)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x7fff, 0x6}, 0x1b}, 0x10) [ 2080.260882][ T6223] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xfe03}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2080.348124][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 2080.348139][ T27] audit: type=1804 audit(1585939513.237:982): pid=6224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/9/cgroup.controllers" dev="sda1" ino=16065 res=1 18:45:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x7a], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f0000000100), &(0x7f0000000300)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40188}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x14, &(0x7f00000001c0)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={r7, @in={{0x2, 0x4e21, @broadcast}}, 0x3, 0x1000, 0x80000000, 0x8, 0xc9}, &(0x7f0000000040)=0x98) [ 2080.411804][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2080.476827][ T6232] bridge1: port 1(syz_tun) entered blocking state [ 2080.487092][ T6232] bridge1: port 1(syz_tun) entered disabled state 18:45:13 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) close(r1) [ 2080.530229][ T6232] device syz_tun entered promiscuous mode 18:45:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xff00}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) recvmsg$kcm(r0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) sendto$unix(r2, &(0x7f0000003a40)="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"/294, 0xffffffffffffff5d, 0x20000000, 0x0, 0xffffff8e) [ 2081.050352][ T6247] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2081.090394][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2081.141498][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2081.149826][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2081.159383][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2081.168823][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2081.208654][ T6254] device macsec0 left promiscuous mode [ 2081.238622][ T6254] device macvlan2 left promiscuous mode [ 2081.247722][ T6254] device bridge19 left promiscuous mode [ 2081.308930][ T6252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2081.325988][ T6248] 8021q: VLANs not supported on lo 18:45:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "0300"}}}}}, 0x2e) 18:45:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xff0f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) 18:45:14 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x810e00}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x48, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xed8f322df9d9e526}, 0x4004044) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x20, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x20000010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SSID={0xf, 0x34, "1b251609beb8e391c00e16"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x60000040) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x705, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4000, 0xc02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 18:45:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x18}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x20}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000005140)={{0x0, 0x0, @identifier="3b85fe997de8d0eb234329bb9fa61f4b"}, 0x692, [], "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"}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000240), 0x39e) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 2081.547910][ T6285] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xff2f}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2081.712355][ T6295] dccp_invalid_packet: P.Data Offset(9) too large 18:45:14 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r2, 0xac}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) close(r0) 18:45:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000180007841dfffd946f6105011c148100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x9, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6ffe00000000000000fc24f7e547dfb84c800d0001007564703a73797a310000000038000400200001000a0000000000000000000000000000000000ffffffffffff000000001400020002000000ffffffff0000000000000000"], 0x60}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001a000535d25a80648c63940d0124fc60100006400a0502000300000037153e370a00038003001700d1bd", 0x33fe0}], 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000002c0)=0x6, 0x4) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xeca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x565c865f3ef82aa) 18:45:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x89f79}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:14 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600000f007009e0ff008001fffffe100004000630477fbac141441e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x104, 0x0, &(0x7f0000000400)="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"}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c4d4049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065fd3072aae80677eeba68562eaeae2bcd87cef9000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103600000f007009e0ff008001fffffe100004000630477fbac141441e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600000f007009e0ff008001fffffe100004000630477fbac141441e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x104, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a58"}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c4d4049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065fd3072aae80677eeba68562eaeae2b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600000f007009e0ff008001fffffe100004000630477fbac141441e0000001be3e7d2a182fff", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400)}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c4d4049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065fd3072aae80677eeba68562eaeae2bcd87cef9000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103600000f007009e0ff008001fffffe100004000630477fbac141441e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000b67000), &(0x7f0000000040)=0x4) sendto$inet6(r3, &(0x7f0000000640)="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", 0x1000, 0x4000004, &(0x7f00000000c0)={0xa, 0x4e23, 0xfff, @mcast2, 0x401}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x40) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x4004084) [ 2082.066194][ T6323] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 2082.101615][ T6323] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2082.334636][ T6309] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2082.344095][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2082.598547][ T6339] dccp_invalid_packet: P.Data Offset(9) too large [ 2082.679874][ T6323] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 2082.713391][ T6323] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2082.876417][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, '\v\x00'}}}}}, 0x2e) 18:45:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x200000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x3], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xd, 0x2, 0x401, 0x70bd27, 0x25dfdbfb, {0x3, 0x0, 0xa}, [@typed={0x8, 0x19, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40060}, 0x4000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000580)) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000300)=0x1, 0x4) 18:45:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x40892}, 0x4000800) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2800000010000400000000000000000000000000438352a61474efeda392dc78eaac72f068badb67ed378b04b92f91e5ce1bd3bd56c7538c5c11618826ddad2ee7e3a35ce1e7dead31d2a0e118f8128debfcebde2adc19e59a5b9b4f5416c5f155bca875a59afb4b2b66a0dd796b800010a5b6bf84e6405ad813c8f714bcbc37a019d5ac3c75d4e5d12e86c9b7f3f2c7c1f6bdeb91ebd508dc4e3502c4f1dc03c3874bafbba34e46736a510c0fad3a9374c831bef606044ddf0c468dd702", @ANYRES32=r3, @ANYBLOB="000000000000000008000a00a3b79985159ec0e2526b1f1ccd338b7594f1da6b9bd4de81011c81dc1976cd7fdb0a72a9daaa062013f72a40a614b7b9d5b8a11042a5ed11d26ff3dabe91aa5c20d6223cc69d6f3e60da225e852ee9eff533440395cc355de26ffe3ae2e6433f6f8efbe87ac877b5c11185f1754ee154370a5a86bd", @ANYRES32=r5, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv4_getaddr={0x18, 0x16, 0x200, 0x70bd28, 0x25dfdbfb, {0x2, 0x20, 0x80, 0xc8}}, 0x18}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_delroute={0x38, 0x19, 0x100, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x4, 0xfe, 0x2, 0xfe, 0x7, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @typed={0x8, 0x45, 0x0, 0x0, @pid=0xffffffffffffffff}}, @RTA_IIF={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x40000021) ioctl$TUNSETLINK(r0, 0x400454d8, 0x907100) close(r0) 18:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='geneve1\x00') r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x59, 0x66376179) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f00000003c0)=0x7f, 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020f00e9ff1078a30e231438ea000000"], 0x10}}, 0x0) recvmmsg(r6, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) r7 = accept(r6, 0x0, &(0x7f0000000240)) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000010000008000a00", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 18:45:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x300000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2083.201971][ T6353] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x4], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:16 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe3a, &(0x7f00000002c0)={0x0}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x40091) r1 = socket(0x1000000010, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000100), 0x492492492492711, 0x0) 18:45:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x400000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2083.440213][ T6364] bridge1: port 2(team0) entered blocking state [ 2083.466192][ T6364] bridge1: port 2(team0) entered disabled state 18:45:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x500000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2083.504863][ T6364] device team0 entered promiscuous mode [ 2083.510988][ T6364] device team_slave_0 entered promiscuous mode [ 2083.541524][ T6364] device team_slave_1 entered promiscuous mode 18:45:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x5], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, '$\x00'}}}}}, 0x2e) 18:45:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x12, 0x3c, 0x4, 0x400, 0x0, 0x1}, 0x40) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x5}, 0x8) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, r2, 0x0, [], 0x0, r3, 0x0, 0x20000}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f00000002c0)=""/255}, 0x20) 18:45:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x600000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x6], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xffffff9b}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) connect$caif(r3, &(0x7f0000000040)=@rfm={0x25, 0x43da, "e15823c85563934647b846bc7b8c3e69"}, 0x18) sendfile(r2, r1, 0x0, 0x100000001) 18:45:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x1000000010, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060158980000000000000000000000050001008f5a05863aa2edeca7daecef5729194e25ce6b0c6be48a4580c74230ee2cf74e34943619f654866af167e6f266f97538f7a4923879c025f6f862ee437c692a4757c237fdd23c64977acde16cc646657b31627eaeb39952e46d6bc89900fb05fccd9e11e7874400eaee6f78f1a8"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2084.826860][ T6420] validate_nla: 2 callbacks suppressed [ 2084.826869][ T6420] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x7], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2084.907193][ T27] audit: type=1804 audit(1585939517.797:983): pid=6419 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/13/cgroup.controllers" dev="sda1" ino=16622 res=1 [ 2084.919722][ T6426] dccp_invalid_packet: P.Data Offset(9) too large 18:45:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x800000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, '\v\x00'}}}}}, 0x2e) 18:45:17 executing program 0: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x20240009, 0x0, 0xff00}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), 0x4) 18:45:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x80ffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='X', 0x1, 0x408d0, &(0x7f0000000000)={0xa, 0x4e21, 0xffffff51, @empty, 0x599b1faf}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bond\x00', {0x3}, 0x6}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000680)={r7}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r7, 0x4}, &(0x7f00000000c0)=0x8) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r8, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x78) [ 2085.491952][ T6438] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, '/\x00'}}}}}, 0x2e) 18:45:18 executing program 0: r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/182, 0xb6, 0x2, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @mcast2, 0x1ff}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x79943408}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000001) 18:45:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xb00000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0xf], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1bc, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8894}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000074, 0x0) 18:45:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8500"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:45:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf0ffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2086.119234][ T6485] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2086.131419][ T6486] tipc: Enabling of bearer rejected, failed to enable media 18:45:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x48], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002090500000000000000000007000004080006400000000108000340000000072c00020006000340000200001400018008000100ac1414bb08000200ac1414aa0c00028005000100110000000052"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040051) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000240)={0x2, 0xfe0, 0x81, 0x5, 0x5, 0xa, 0x8, "97aa0bc02ae6383218059fc45e339ee25fad3839", "ee0051a1949c3c070a00"}) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x10) 18:45:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000005000000000000008510000002000000850000000700000095000000000000009500000000000000adc2fc1d654cc83df50f56aaa34ff3a4264e343f8e68fd342f7b3e922d33682a0f3600e4fc1a88f20cd825ee6ac942067971c8417bd021b9c9b4726180fc96d4db8078b7947fb90ca1b5daf3122a1f7d67f143908fff51ccdbbf95297f1e85ea72edaa56ad911b603e233dcc82805fadace6739013c544a236bb17a1354ffdfc9232a00aa29542b4e3a7a673e9603c7a0a01"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4800}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x81}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) [ 2086.228764][ T6489] dccp_invalid_packet: P.Data Offset(9) too large 18:45:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000100)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5003837e3009010100000000b3d5033cdea800000000000000000900010973797a300000af09c1f402002c00018014000300fe7f00000000000000000000000001008c00000000000000130000000000"], 0x50}}, 0x0) 18:45:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2086.622429][ T6506] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, 'G\x00'}}}}}, 0x2e) 18:45:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:19 executing program 3: r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x804}}) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x201, 0x81, 0x2, 0x5, 0xa, @multicast}, 0x10) r1 = socket(0x10, 0x80002, 0x2) r2 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0\x00'}}) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:45:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x4c], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:19 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', r0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x7, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "3aea501dfd32b989", "bb018d00539e2b75188680c38aa7bfc8", "b42e16bd", "8f7e1507dac428a9"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015b000/0x4000)=nil, 0x4000, 0x0, 0x8013, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x1000}, 0x18) tee(r3, r3, 0x3ff, 0x0) r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000001c0)) r5 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) accept4$phonet_pipe(r5, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) 18:45:19 executing program 5: r0 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r1, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000c40)={0x101c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_FTM_RESPONDER={0x1008, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}]}, 0x101c}, 0x1, 0x0, 0x0, 0x8800}, 0x80c0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000800000000000000000000850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r2, 0x1800000000000060, 0xf00, 0x0, &(0x7f0000000c00)="480e003f0000007e5bc5795e8064", 0x0, 0xf000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2087.128594][ T6537] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x60], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2087.222396][ T6542] dccp_invalid_packet: P.Data Offset(9) too large 18:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ddff000000000000282012000c000100766574680000000018000200fd0001000001000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981001abf3529025ef9b99545ce80e1a8372be1ea081d09501f94f20e00"/127, @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000d7922f613c49876110002508bb4f78a3e32e00"/36, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r4}}, 0x20}}, 0x0) 18:45:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x5000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2087.635096][ T6555] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2087.649115][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2087.664096][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2087.893337][ T6576] dccp_invalid_packet: P.Data Offset(9) too large 18:45:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "bb0300"}}}}}, 0x2e) 18:45:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x68], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2880e50000604f2226cf49d29d12689a26bbfca47e10a9e8dd843c24819d0ad2fa59f1c41c916e855b4df801484d53429160fb73077d389bb399090c19d09101b4460ed333c136d3d6c0c484f725d7f8b3d0b665c3005118f1a0f3b613903ac21b5b8d96e857d21965cf4d55e10a229b8287264815de237a73730246c437e7e896ad937f3d23a24de203e4b75fd426030d3eda8c6e43148bfd421f1fe9d25654c8fa99f90424e1f18c318872aa1d9ce3fa05a29e8c6d66d8cd9ce84c55b9558b819d43c09cde3bfa1f279b99bea335c7dbbdf0aa3e", @ANYRES32=r4, @ANYBLOB="00010000eaff00000a00", @ANYRES32=r7, @ANYBLOB="5e848cca82d53536644c9b385431d185ad15953b04b0448134058750adf04a9cf95f72f2c1e476b4000000000004000000006623e91eb07ce5c4239550dc9870f1bcd95633135e68c5e1a0a5d17b5e3f0bffea2858dc2e4b8e5d61382252"], 0x28}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r7) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r8 = socket$rxrpc(0x21, 0x2, 0xa) r9 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) accept$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendto$rxrpc(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) 18:45:21 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177b9f70000000000000000000000000000000000000000000000000000000200000003000000880400000000000098000000000000009800000500000000f0030000f0030000f0030000f0030000f00300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000070000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e6400000065716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001003580300000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000269705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000fcffffff0e0000600000000000000000000000005001686173686c696d697400000001000000000000000000000000000000000276657468305f746f5f7b737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000006e00000000000000000000000900000008000000000000000000000000000000480054454500000000000000000000ba60eabc545ffd22000000000000000001ac1414bb0000000000000000000000007465716c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000540)={{0x89, @local, 0x4e24, 0x1, 'lblc\x00', 0x8, 0x800, 0x7d}, {@loopback, 0x4e22, 0x4, 0x20, 0x3, 0x10000}}, 0x44) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r7, 0xb03, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b80)={0x1f8, r7, 0xe06, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xccb1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9e5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf4a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xad}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff248}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff00}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x877}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc7c9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x53, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x8900, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="4000000010001fff0000000000005b2b23ce6c885cc9311ed9e4396ed3efd69c3bc57ccbb0dadbb81e58", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8, @ANYBLOB="0265fc65ced8982300d6aa824856870932026d9d345ff456dd13bfa26bc060b3df0b8bc66af906171677e8b91465c5c84b9b82b35f2298d9de9f3f8be5ef8c19321fe44a4c0c519118e67ed34580633e5f1be8983052ccb19c408187a445ebea09fe01ede68b293ebf2f7a16f576f4ea3e0f13b35266ee8a92e80c23b18bd9a9a6653295f5c421801c28e86b70235677f6e77c92edfa745a8424060e1653f12e043f8eb3cb471eaf2b48a5a47d900427099747bcd7f2e1c7965e902c841deacadcf8fa8d1a8b62df"], 0x40}}, 0x0) 18:45:21 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', r0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x7, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "3aea501dfd32b989", "bb018d00539e2b75188680c38aa7bfc8", "b42e16bd", "8f7e1507dac428a9"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000015b000/0x4000)=nil, 0x4000, 0x0, 0x8013, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x1000}, 0x18) tee(r3, r3, 0x3ff, 0x0) r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000001c0)) r5 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) accept4$phonet_pipe(r5, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) [ 2088.630237][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x8000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2088.734528][ T6590] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2088.761205][ T6599] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x6c], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:21 executing program 3: r0 = socket(0x2c, 0xa, 0x3ff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[]}}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 18:45:21 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="02020700210000002abd7000fddbdf25100018007f0174002f31a2756db68bd12681a46765c089687b3bf7283fe30b2f66b453207ca54ec19f3cf644faeb6552980cab7431af112ecaea96b09467cb0106a716b607802ad12c43b26e377d33c0"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000b67000), &(0x7f0000000040)=0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) 18:45:21 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5051e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x8}}}]}]}]}}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:45:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xa000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2089.427135][ T6614] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "000004"}}}}}, 0x2e) 18:45:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xf000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x74], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000c00000000b6a107004d0600f0000000000000bc7f458168a5d5a12af6f4ce5e1b3a6b286cc70230251b0cfaec50864c69e23dabdda2e67d7a4e7de6c790f9a743e6f1347928212962047c67", @ANYRES32=0x0, @ANYRES64=r0], 0x5}}, 0x0) r1 = socket(0x6, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:45:23 executing program 5: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100766c616e000000003400028006000100000000000c0002000e0000000a0000001c0003800c00010003000000000000800c000100010000000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="be05b4d7cccd6f68bbc9a7eae28bd82f04cb33ffbf6fe2ab01d87a391a38c267837d909329461d8055eeed91ee36cf7994"], 0x74}}, 0x0) 18:45:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0xfff, &(0x7f0000000000)="080db5055e0bcfe847a071baf759189dd11247f369809bc038e7728bf1cefeb53197ba42df1a21da7fc2d10771e3c8d48620c5537964356bb51055097e1da1") 18:45:23 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendto$llc(r5, &(0x7f0000000200)="616160c78b93580e4f76459f5d8484687175adef45d227aa2f4709dc81a5fdba68a01ca0250e7a79c78442ea97de7295bfac4ca10d1ec4b2edff997a161c026382c4163580094611147eb1fc2e3e630c966500dae12c25c68aa29578a4f89a251c6b27800aedf30a686dc74f9486ff091987ab3f36b96b6461b3197c1892d94d5ed0905976943c731ea7a33afdf74be19ea429088f41645b4cd0ca6e06f23fe8c3ef9b1a303705486a73d6abc452e845007320a1e61e915ea174", 0xba, 0x20000000, &(0x7f00000002c0)={0x1a, 0x118, 0x0, 0x9, 0xeb, 0x1f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xff16) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 18:45:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x10000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) getsockname$ax25(r1, &(0x7f0000000140)={{0x3, @null}, [@rose, @rose, @remote, @netrom, @default, @rose, @bcast, @null]}, &(0x7f00000001c0)=0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x801, 0x84) r4 = socket(0x23, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000200)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) r5 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_buf(r5, 0x0, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) getsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000100)=0x8) r6 = accept$inet(r2, &(0x7f0000003400)={0x2, 0x0, @multicast2}, &(0x7f0000003440)=0x10) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc60100002400a000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 2090.400239][ T6667] dccp_invalid_packet: P.Data Offset(9) too large 18:45:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x11020000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x14010000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2090.684670][ T6691] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2090.721196][ T6691] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2090.723543][ T6673] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2090.731386][ T6691] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.0'. 18:45:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x7a], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2091.056104][ T6704] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2091.302975][ T6720] dccp_invalid_packet: P.Data Offset(9) too large 18:45:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100200"}}}}}, 0x2e) 18:45:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x18000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:24 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="4846bc4b5ca6463f4e111c1ef1ff537d57c0e015cda8af99fc42921f8f470e9d97c95b0a8b4aeeec3bbe8d029f3f84048b404c36b984d9dbca666922f36341ddc990cedfdc54ae93dff9af161f975c231fd64fddde55a097a77ed97c0a1f81dc8d662518ea3fe80e6cbb19f7cbb3b67b7863036dc7d108ab87e84584010b7923ac91cb6cf975d57199b8aeb90b3f29b83373bfb19b42dfc6fffbf6704e56423cbb84e9f2648d0e7572c99501feac26322c64967d04", 0xb5}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f00000005c0)="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", 0x13f}, {&(0x7f0000000280)="f433dd132d2303a06a8957d3673d7bb1d9096da0d2f763bd181737b0e3929a49c8e4c710afc588720c8bdfe41f9000000000400600000000000000009b094c872619027a4c00c00f8fcdcce2ec9925993121e4402975122e26e2a41e14dac409f7422ca9dff66b7f9c30639674575df7fb8e645d", 0x74}], 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) openat$cgroup_ro(r3, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) 18:45:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:24 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x400a}, {r0, 0x4004}, {r0, 0x400}, {r2, 0x4010}, {r3, 0x4000}], 0x5, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)={[0x5]}, 0x8) 18:45:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x2, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x4, 0x9, 0xff, "c166ebc3eaed5ae74f3777a4a0872612527c472b56fedd079dc769b65b6f9adcda901ff213ec91170ef96a580f61fa8d7ccaf5bd242dda6dd6865d800f9876", 0x2f}, 0x60) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a030c3"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1ccb0100e01cdd3fd996544371f062deb08627e6a5bf300020684319b8d669", @ANYRES16=r8, @ANYBLOB="874b00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4004) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}}, 0x24}}, 0x0) 18:45:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9cffff", 0x3f8, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x4c]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0xb, "a78ce540cd4f791153d581000000000000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac11084db8f736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="080000005b4be16a6521a7401a0267a71570df082d771b9397955cb28592ae70f22265cb6cbac37e64239a3db10044d8000000009d3f6e7b", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000001801088044000780080006000000000008000600000000000800060000000000080006000000000008000600000000000800050000000000080005000000000008000600000000003c00078008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000004c0007800800050000000000080006000000000008000500000000000800050000000000080006000000000008000500000000000800060000000000080006000000000008000600000000004400078008000500000000000800050000000000080006000000000008000600000000000800050000000000080005000000000008000500000000000800060000000000040007800800010000000000"], 0x134}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020038000535d25a80648c63940d0324fc60100002400a000000051a82c137153e670502018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)='g', 0x324, 0x4004000, 0x0, 0x185) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x14, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e24, @rand_addr=0x7}}}, &(0x7f0000000800)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000840)={r6, 0x5}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4) [ 2091.845628][ T6733] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x20000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x2], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2091.932192][ T6740] dccp_invalid_packet: P.Data Offset(9) too large 18:45:24 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x3, 0x0, 0x80000000}) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e000129480b02da301b6baf0f000020", @ANYRES32], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 2092.053372][ T6753] netlink: 79310 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2092.107264][ T6753] netlink: zone id is out of range [ 2092.129766][ T6753] netlink: zone id is out of range [ 2092.154861][ T6753] netlink: zone id is out of range 18:45:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x22020000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2092.182078][ T6753] netlink: zone id is out of range [ 2092.201765][ T6753] netlink: zone id is out of range [ 2092.228389][ T6753] netlink: zone id is out of range [ 2092.246679][ T6753] netlink: zone id is out of range [ 2092.262464][ T6753] netlink: zone id is out of range [ 2092.282411][ T6753] netlink: zone id is out of range [ 2092.302050][ T6753] netlink: zone id is out of range [ 2092.320852][ T6753] netlink: zone id is out of range [ 2092.338807][ T6753] netlink: zone id is out of range 18:45:25 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="4846bc4b5ca6463f4e111c1ef1ff537d57c0e015cda8af99fc42921f8f470e9d97c95b0a8b4aeeec3bbe8d029f3f84048b404c36b984d9dbca666922f36341ddc990cedfdc54ae93dff9af161f975c231fd64fddde55a097a77ed97c0a1f81dc8d662518ea3fe80e6cbb19f7cbb3b67b7863036dc7d108ab87e84584010b7923ac91cb6cf975d57199b8aeb90b3f29b83373bfb19b42dfc6fffbf6704e56423cbb84e9f2648d0e7572c99501feac26322c64967d04", 0xb5}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f00000005c0)="b805669bfcdfd5b436dbf848c118196326e89844a84cca9a7f77eb3e79f37898c8cfee6caedcc3385356b1f7dfcd5c630beac92218bec206b0c16ebdc600b815e7694b138d9b8f27509900000000000000000000000000000000aadd7ad1f94e8c83231b8d87168fb8df63085de87f633f99d9f03a1071e233c706a84461f0d1757852a09a249e5d3e99467db61afdbd249586618e19f5a52cebb686d13b934e6feb87a895052372e1dd50bcdbeae0e544674a66c26b6922549a79c283ccaf32a13c8a5e9cb4d5be149d9693f1701855219f49da429b5c446dcf69455e4195197a7c5bbde08e20c917fda82e4c171b2b72b369ce10e09e3d3c8bb6ebf54f487b3aee385bad6779e686459fb3b716564f62c431394a33874754e6b74465cdfaabab0a68d7caed9fb793aa05a3bd4ff719f96d38d2f66cccefadb42f7aea0e8a", 0x13f}, {&(0x7f0000000280)="f433dd132d2303a06a8957d3673d7bb1d9096da0d2f763bd181737b0e3929a49c8e4c710afc588720c8bdfe41f9000000000400600000000000000009b094c872619027a4c00c00f8fcdcce2ec9925993121e4402975122e26e2a41e14dac409f7422ca9dff66b7f9c30639674575df7fb8e645d", 0x74}], 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) openat$cgroup_ro(r3, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) [ 2092.359376][ T6753] netlink: zone id is out of range [ 2092.376065][ T6753] netlink: zone id is out of range [ 2092.388980][ T6753] netlink: zone id is out of range [ 2092.522141][ T6754] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2092.545177][ T6753] netlink: 79310 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100300"}}}}}, 0x2e) 18:45:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x2f000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:26 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb63b47", 0xc}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="9e6ca07fefe7eb1ce4d35911c76b3bdb61c412604964e65630ccf9816efe32f198939bd187ee487a9f480f543a35c2944b36fdd4b9b7e823e77b3ba6443c8fcaa430e21ab795009ae3629e8b4cc0cf67bf71596b4ab9cd0269b432e21f9fdee2afa35a4ff593bcbf37858892d7f0e2e6c591750200000000000000898b39f176dfaa8e0ea5a6dd3f4801a51f25bb2ed6e79e976e4e34e6cf0bb2ddeb616a6c90886cf3000000000000000086b35908", @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB="84fa8cd190cf3cc15886950b3c9e5d0fb237f18102ef72f9dd8bb374d1bd654a1446da14fc965a15eb98ab7041d1458509cb", @ANYRES16=r1, @ANYRES32=r3, @ANYRES64=0x0, @ANYRES32=r4, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r3]], 0xb7) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:45:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x14, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000009c0)={r5, 0x7}, &(0x7f0000000a00)=0x8) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") recvmmsg(r0, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 18:45:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x3], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000400140012000c0001006272696467650000000200"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x6c, 0x14, 0x10, 0x70bd28, 0x25dfdbfc, {0x2, 0x78, 0x2, 0xff, r8}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x6}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x10001}, @IFA_FLAGS={0x8, 0x8, 0x9}, @IFA_FLAGS={0x8, 0x8, 0x602}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x100) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r9, @ANYBLOB="443c3d3c034cfa9d683826e7673405fcda2ee6f5182e4522e51baaeb8b90a6f914"], 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) [ 2093.267066][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:45:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x34030000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2093.359592][ T6788] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2093.383216][ T6795] device syz_tun left promiscuous mode [ 2093.391609][ T6795] bridge23: port 1(syz_tun) entered disabled state 18:45:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x4], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3c000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}}}]}]}, 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400100f286b786a42ef34828", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x300080c0}, 0x24000881) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000000c0)={0x6, 'wg0\x00', {0x7f}, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendfile(r6, r1, 0x0, 0x10000000f) [ 2093.572339][ T6795] bridge26: port 1(syz_tun) entered blocking state [ 2093.591820][ T6795] bridge26: port 1(syz_tun) entered disabled state [ 2093.626452][ T6795] device syz_tun entered promiscuous mode [ 2093.662487][ T6785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 18:45:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x3f000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2093.759513][ T27] audit: type=1804 audit(1585939526.648:984): pid=6813 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/26/cgroup.controllers" dev="sda1" ino=16939 res=1 [ 2093.839578][ T6803] bond6: (slave veth73): making interface the new active one [ 2093.848821][ T6803] [ 2093.851188][ T6803] ====================================================== [ 2093.858208][ T6803] WARNING: possible circular locking dependency detected [ 2093.865233][ T6803] 5.6.0-syzkaller #0 Not tainted [ 2093.870200][ T6803] ------------------------------------------------------ [ 2093.877216][ T6803] syz-executor.5/6803 is trying to acquire lock: 18:45:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x180000000000000a) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x0, &(0x7f00000000c0)}, 0x10) [ 2093.883672][ T6803] ffffffff8a3ed028 (lock#3){+.+.}-{3:3}, at: cma_netdev_callback+0xc5/0x380 [ 2093.893015][ T6803] [ 2093.893015][ T6803] but task is already holding lock: [ 2093.900387][ T6803] ffffffff8a5668a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 2093.909368][ T6803] [ 2093.909368][ T6803] which lock already depends on the new lock. [ 2093.909368][ T6803] [ 2093.920059][ T6803] [ 2093.920059][ T6803] the existing dependency chain (in reverse order) is: [ 2093.929169][ T6803] [ 2093.929169][ T6803] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 2093.936984][ T6803] __mutex_lock+0x156/0x13c0 [ 2093.942198][ T6803] siw_create_listen+0x329/0xed0 [ 2093.947886][ T6803] iw_cm_listen+0x166/0x1e0 [ 2093.952915][ T6803] rdma_listen+0x5e2/0x910 [ 2093.957869][ T6803] cma_listen_on_dev+0x512/0x650 [ 2093.963433][ T6803] cma_add_one+0x6b0/0xb70 [ 2093.969039][ T6803] add_client_context+0x3b4/0x520 [ 2093.974619][ T6803] enable_device_and_get+0x1cd/0x3b0 [ 2093.980437][ T6803] ib_register_device+0xa12/0xda0 [ 2093.986000][ T6803] siw_newlink+0xdfe/0x1320 [ 2093.991054][ T6803] nldev_newlink+0x29e/0x420 [ 2093.996189][ T6803] rdma_nl_rcv+0x586/0x900 [ 2094.001328][ T6803] netlink_unicast+0x537/0x740 [ 2094.006795][ T6803] netlink_sendmsg+0x882/0xe10 [ 2094.012275][ T6803] sock_sendmsg+0xcf/0x120 [ 2094.017241][ T6803] ____sys_sendmsg+0x6bf/0x7e0 [ 2094.022715][ T6803] ___sys_sendmsg+0x100/0x170 [ 2094.028248][ T6803] __sys_sendmsg+0xec/0x1b0 [ 2094.033377][ T6803] do_syscall_64+0xf6/0x7d0 [ 2094.038436][ T6803] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2094.045007][ T6803] [ 2094.045007][ T6803] -> #0 (lock#3){+.+.}-{3:3}: [ 2094.052071][ T6803] __lock_acquire+0x2c21/0x4e00 [ 2094.057548][ T6803] lock_acquire+0x1f2/0x8f0 [ 2094.062603][ T6803] __mutex_lock+0x156/0x13c0 [ 2094.067738][ T6803] cma_netdev_callback+0xc5/0x380 [ 2094.073369][ T6803] notifier_call_chain+0xc0/0x230 [ 2094.078997][ T6803] call_netdevice_notifiers_info+0xb5/0x130 [ 2094.085754][ T6803] call_netdevice_notifiers+0x79/0xa0 [ 2094.091926][ T6803] bond_change_active_slave+0x80e/0x1d90 [ 2094.098102][ T6803] bond_select_active_slave+0x250/0xa60 [ 2094.104238][ T6803] bond_enslave+0x4287/0x4800 [ 2094.109528][ T6803] do_set_master+0x1d7/0x230 [ 2094.114758][ T6803] __rtnl_newlink+0x11d4/0x1590 [ 2094.120230][ T6803] rtnl_newlink+0x64/0xa0 [ 2094.125316][ T6803] rtnetlink_rcv_msg+0x44e/0xad0 [ 2094.130893][ T6803] netlink_rcv_skb+0x15a/0x410 [ 2094.136570][ T6803] netlink_unicast+0x537/0x740 [ 2094.141856][ T6803] netlink_sendmsg+0x882/0xe10 [ 2094.147301][ T6803] sock_sendmsg+0xcf/0x120 [ 2094.152234][ T6803] ____sys_sendmsg+0x6bf/0x7e0 [ 2094.157524][ T6803] ___sys_sendmsg+0x100/0x170 [ 2094.162724][ T6803] __sys_sendmsg+0xec/0x1b0 [ 2094.167753][ T6803] do_syscall_64+0xf6/0x7d0 [ 2094.172943][ T6803] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2094.179346][ T6803] [ 2094.179346][ T6803] other info that might help us debug this: [ 2094.179346][ T6803] [ 2094.190191][ T6803] Possible unsafe locking scenario: [ 2094.190191][ T6803] [ 2094.197720][ T6803] CPU0 CPU1 [ 2094.203199][ T6803] ---- ---- [ 2094.208878][ T6803] lock(rtnl_mutex); [ 2094.212971][ T6803] lock(lock#3); [ 2094.219208][ T6803] lock(rtnl_mutex); [ 2094.226070][ T6803] lock(lock#3); [ 2094.229853][ T6803] [ 2094.229853][ T6803] *** DEADLOCK *** [ 2094.229853][ T6803] [ 2094.238020][ T6803] 1 lock held by syz-executor.5/6803: [ 2094.243494][ T6803] #0: ffffffff8a5668a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 2094.253127][ T6803] [ 2094.253127][ T6803] stack backtrace: [ 2094.259145][ T6803] CPU: 0 PID: 6803 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 2094.267393][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2094.277441][ T6803] Call Trace: [ 2094.280745][ T6803] dump_stack+0x188/0x20d [ 2094.285086][ T6803] check_noncircular+0x32e/0x3e0 [ 2094.290025][ T6803] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2094.296005][ T6803] ? print_circular_bug.isra.0+0x3a0/0x3a0 [ 2094.301921][ T6803] ? mark_lock+0x12b/0xf10 [ 2094.306341][ T6803] __lock_acquire+0x2c21/0x4e00 [ 2094.311196][ T6803] ? mark_held_locks+0xe0/0xe0 [ 2094.315965][ T6803] ? probe_sched_wakeup+0x6e/0x80 [ 2094.321091][ T6803] lock_acquire+0x1f2/0x8f0 [ 2094.325621][ T6803] ? cma_netdev_callback+0xc5/0x380 [ 2094.330909][ T6803] ? lock_release+0x800/0x800 [ 2094.335586][ T6803] __mutex_lock+0x156/0x13c0 [ 2094.340180][ T6803] ? cma_netdev_callback+0xc5/0x380 [ 2094.345398][ T6803] ? cma_netdev_callback+0xc5/0x380 [ 2094.350784][ T6803] ? cfg80211_init_wdev+0x4d0/0x4d0 [ 2094.356087][ T6803] ? mark_held_locks+0x9f/0xe0 [ 2094.361066][ T6803] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 2094.366637][ T6803] ? mutex_trylock+0x2c0/0x2c0 [ 2094.371559][ T6803] ? queue_work_on+0x127/0x200 [ 2094.376453][ T6803] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2094.382551][ T6803] ? inetdev_event+0x1a5/0x15b0 [ 2094.387428][ T6803] ? update_gid_event_work_handler+0xb0/0xb0 [ 2094.393511][ T6803] ? tun_device_event+0x71/0x1100 [ 2094.398540][ T6803] ? add_netdev_upper_ips+0x30/0x30 [ 2094.403948][ T6803] ? cma_netdev_callback+0xc5/0x380 [ 2094.409390][ T6803] cma_netdev_callback+0xc5/0x380 [ 2094.416387][ T6803] ? lockdep_rtnl_is_held+0x22/0x30 [ 2094.421955][ T6803] ? team_port_get_rtnl+0xbe/0x120 [ 2094.427243][ T6803] ? dlci_dev_event+0x69/0x320 [ 2094.432108][ T6803] notifier_call_chain+0xc0/0x230 [ 2094.437128][ T6803] call_netdevice_notifiers_info+0xb5/0x130 [ 2094.443134][ T6803] call_netdevice_notifiers+0x79/0xa0 [ 2094.448527][ T6803] ? call_netdevice_notifiers_info+0x130/0x130 [ 2094.454692][ T6803] ? queue_delayed_work_on+0x12f/0x210 [ 2094.460229][ T6803] bond_change_active_slave+0x80e/0x1d90 [ 2094.465865][ T6803] ? bond_slave_link_status+0x70/0x70 [ 2094.471250][ T6803] bond_select_active_slave+0x250/0xa60 [ 2094.476809][ T6803] ? bond_set_carrier+0x20e/0x3f0 [ 2094.481829][ T6803] ? bond_change_active_slave+0x1d90/0x1d90 [ 2094.487742][ T6803] bond_enslave+0x4287/0x4800 [ 2094.492544][ T6803] ? bond_update_slave_arr+0x820/0x820 [ 2094.498125][ T6803] ? rtmsg_ifinfo_event.part.0+0xb6/0xe0 [ 2094.503858][ T6803] ? rtmsg_ifinfo+0x7f/0xa0 [ 2094.508446][ T6803] ? __dev_notify_flags+0x183/0x2c0 [ 2094.517487][ T6803] ? dev_change_name+0x930/0x930 [ 2094.522616][ T6803] ? alloc_netdev_mqs+0xa1d/0xde0 [ 2094.527725][ T6803] ? bond_update_slave_arr+0x820/0x820 [ 2094.533426][ T6803] do_set_master+0x1d7/0x230 [ 2094.538015][ T6803] __rtnl_newlink+0x11d4/0x1590 [ 2094.543216][ T6803] ? rtnl_link_unregister+0x240/0x240 [ 2094.548765][ T6803] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2094.554837][ T6803] ? is_bpf_text_address+0xcb/0x160 [ 2094.560254][ T6803] ? kernel_text_address+0x6e/0xe0 [ 2094.565389][ T6803] ? __kernel_text_address+0x9/0x30 [ 2094.570772][ T6803] ? unwind_get_return_address+0x5a/0xa0 [ 2094.576644][ T6803] ? profile_setup.cold+0xc1/0xc1 [ 2094.581685][ T6803] ? arch_stack_walk+0x84/0xd0 [ 2094.586452][ T6803] ? stack_trace_save+0x8c/0xc0 [ 2094.591299][ T6803] ? stack_trace_consume_entry+0x160/0x160 [ 2094.597105][ T6803] ? rtnl_newlink+0x46/0xa0 [ 2094.601603][ T6803] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2094.607158][ T6803] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2094.613142][ T6803] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2094.618946][ T6803] rtnl_newlink+0x64/0xa0 [ 2094.623384][ T6803] ? __rtnl_newlink+0x1590/0x1590 [ 2094.630077][ T6803] rtnetlink_rcv_msg+0x44e/0xad0 [ 2094.635023][ T6803] ? rtnl_bridge_getlink+0x870/0x870 [ 2094.640672][ T6803] ? lock_acquire+0x1f2/0x8f0 [ 2094.645352][ T6803] ? netlink_deliver_tap+0x146/0xb50 [ 2094.650633][ T6803] netlink_rcv_skb+0x15a/0x410 [ 2094.655469][ T6803] ? rtnl_bridge_getlink+0x870/0x870 [ 2094.660899][ T6803] ? netlink_ack+0xa10/0xa10 [ 2094.665541][ T6803] netlink_unicast+0x537/0x740 [ 2094.670311][ T6803] ? netlink_attachskb+0x810/0x810 [ 2094.675665][ T6803] ? _copy_from_iter_full+0x25c/0x870 [ 2094.685839][ T6803] ? __phys_addr_symbol+0x2c/0x70 [ 2094.691002][ T6803] ? __check_object_size+0x171/0x437 [ 2094.696414][ T6803] netlink_sendmsg+0x882/0xe10 [ 2094.701208][ T6803] ? aa_af_perm+0x260/0x260 [ 2094.705916][ T6803] ? netlink_unicast+0x740/0x740 [ 2094.710993][ T6803] ? netlink_unicast+0x740/0x740 [ 2094.716064][ T6803] sock_sendmsg+0xcf/0x120 [ 2094.720468][ T6803] ____sys_sendmsg+0x6bf/0x7e0 [ 2094.725468][ T6803] ? kernel_sendmsg+0x50/0x50 [ 2094.730149][ T6803] ___sys_sendmsg+0x100/0x170 [ 2094.734829][ T6803] ? sendmsg_copy_msghdr+0x70/0x70 [ 2094.740085][ T6803] ? __fget_files+0x32f/0x500 [ 2094.744893][ T6803] ? ksys_dup3+0x3c0/0x3c0 [ 2094.749304][ T6803] ? __fget_light+0x20e/0x270 [ 2094.753966][ T6803] __sys_sendmsg+0xec/0x1b0 [ 2094.758619][ T6803] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2094.763734][ T6803] ? trace_hardirqs_off_caller+0x55/0x230 [ 2094.769458][ T6803] ? do_syscall_64+0x21/0x7d0 [ 2094.774291][ T6803] do_syscall_64+0xf6/0x7d0 [ 2094.778876][ T6803] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 2094.784768][ T6803] RIP: 0033:0x45c849 [ 2094.788750][ T6803] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2094.808356][ T6803] RSP: 002b:00007f6d3a970c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2094.816923][ T6803] RAX: ffffffffffffffda RBX: 00007f6d3a9716d4 RCX: 000000000045c849 [ 2094.825275][ T6803] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2094.833820][ T6803] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 2094.841791][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2094.849865][ T6803] R13: 00000000000009fc R14: 00000000004ccb3c R15: 000000000076c04c [ 2094.864583][ T6803] bond6: (slave veth73): Enslaving as an active interface with an up link [ 2094.879924][ T6806] bond6 (unregistering): (slave veth73): Releasing backup interface [ 2094.955614][ T6806] bond6 (unregistering): Released all slaves [ 2095.017002][ T6811] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2095.027001][ T6817] tipc: Enabling of bearer rejected, failed to enable media [ 2095.093476][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2095.362445][ T6865] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 18:45:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100400"}}}}}, 0x2e) 18:45:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x5], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}}}]}]}, 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400100f286b786a42ef34828", @ANYRES16=r4, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x300080c0}, 0x24000881) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000000c0)={0x6, 'wg0\x00', {0x7f}, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) sendfile(r6, r1, 0x0, 0x10000000f) 18:45:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x40085) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x23, 0x80802, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000140)={0x2, 0x2}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa84ea35c9f13fc86dd60883ff200140600fe800000000000000200000000000000fe8000f70000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) [ 2095.852860][ T6931] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x48000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x6], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x4c000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x5e030000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2096.126473][ T27] audit: type=1804 audit(1585939529.018:985): pid=6935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir368177740/syzkaller.qbcnAu/27/cgroup.controllers" dev="sda1" ino=16966 res=1 [ 2096.154348][ T6956] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2096.184843][ T6935] tipc: Enabling of bearer rejected, failed to enable media 18:45:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100500"}}}}}, 0x2e) 18:45:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x7], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x61000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1409, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8404) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c) 18:45:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0xf], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2096.732189][ T6985] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x63000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007}, 0x40) [ 2097.003270][ T6998] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100600"}}}}}, 0x2e) 18:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x68000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007}, 0x40) 18:45:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x48], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x61000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:30 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:45:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x6c000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2097.662915][ T7053] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007}, 0x40) 18:45:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x61000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x4c], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2097.703420][ T7059] net_ratelimit: 71 callbacks suppressed [ 2097.703429][ T7059] dccp_invalid_packet: P.Data Offset(9) too large 18:45:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x71000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2097.927619][ T7071] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100700"}}}}}, 0x2e) 18:45:31 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:45:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x61000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x73000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x60], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:31 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:45:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) [ 2098.365084][ T7098] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x68], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x74000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2098.424620][ T7101] dccp_invalid_packet: P.Data Offset(9) too large 18:45:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) [ 2098.589442][ T7114] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100800"}}}}}, 0x2e) 18:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x799f0800}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x6c], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:31 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:45:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x7a000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x74], 0x0, 0x0}}]}, 0x2c}}, 0x0) [ 2099.056494][ T7145] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2099.096368][ T7146] dccp_invalid_packet: P.Data Offset(9) too large 18:45:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) [ 2099.285818][ T7155] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2099.486029][ T7171] dccp_invalid_packet: P.Data Offset(9) too large 18:45:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100900"}}}}}, 0x2e) 18:45:32 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x85000000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x7a], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:32 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:45:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) 18:45:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x85ffffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2099.887382][ T7189] dccp_invalid_packet: P.Data Offset(9) too large 18:45:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "100a00"}}}}}, 0x2e) 18:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) 18:45:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x92010000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x3], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) 18:45:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x95010000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x7f, 0x8, 0x5, 0x1}, 0x3c) 18:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) [ 2100.730441][ T7237] dccp_invalid_packet: P.Data Offset(9) too large [ 2101.115565][ T7261] dccp_invalid_packet: P.Data Offset(9) too large 18:45:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "101000"}}}}}, 0x2e) 18:45:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x4], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) 18:45:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x98010000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) 18:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) 18:45:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) [ 2101.415939][ T7271] validate_nla: 4 callbacks suppressed [ 2101.415948][ T7271] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x5], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) 18:45:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x9cffffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2101.523117][ T7279] dccp_invalid_packet: P.Data Offset(9) too large 18:45:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) [ 2101.740456][ T7286] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "101100"}}}}}, 0x2e) 18:45:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0x9fffffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x0, 0x1}, 0x3c) 18:45:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x8, 0x5, 0x1}, 0x3c) 18:45:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x6], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) 18:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x0, 0x1}, 0x3c) 18:45:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) [ 2102.229165][ T7318] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x7], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xc2020000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x0, 0x1}, 0x3c) [ 2102.348307][ T7326] dccp_invalid_packet: P.Data Offset(9) too large [ 2102.500153][ T7337] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2102.697738][ T7348] dccp_invalid_packet: P.Data Offset(9) too large 18:45:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3fd, @dev}, {{0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "102100"}}}}}, 0x2e) 18:45:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) 18:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5}, 0x3c) 18:45:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xd4030000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:45:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0xf], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xe4ffffff}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2103.058767][ T7359] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:45:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x48], 0x0, 0x0}}]}, 0x2c}}, 0x0) 18:45:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) 18:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5}, 0x3c) 18:45:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x0, 0x5, 0x1}, 0x3c) 18:45:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x8, 0x5, 0x1}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x0, 0xea030000}}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2103.212918][ T7367] dccp_invalid_packet: P.Data Offset(9) too large [ 2103.231483][ T7376] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 2103.642592][ T40] tipc: TX() has been purged, node left! [ 2103.647222][ T7392] dccp_invalid_packet: P.Data Offset(9) too large [ 2103.671672][ T40] tipc: TX() has been purged, node left! [ 2103.678919][ T40] tipc: TX() has been purged, node left!