00000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:26:02 executing program 5: 06:26:02 executing program 3: [ 973.294641][ T929] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:02 executing program 2: 06:26:02 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:02 executing program 3: 06:26:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:02 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000806, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x800) 06:26:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 06:26:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)) 06:26:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 973.544584][ T949] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x20000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000000000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r1) 06:26:02 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:26:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xe, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:02 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:02 executing program 5 (fault-call:6 fault-nth:0): clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 974.170611][ T974] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 974.211895][ T983] FAULT_INJECTION: forcing a failure. [ 974.211895][ T983] name failslab, interval 1, probability 0, space 0, times 0 [ 974.227667][ T983] CPU: 0 PID: 983 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 974.236526][ T983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.246590][ T983] Call Trace: [ 974.249894][ T983] dump_stack+0x172/0x1f0 [ 974.254248][ T983] should_fail.cold+0xa/0x15 [ 974.258850][ T983] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 974.258872][ T983] ? ___might_sleep+0x163/0x280 [ 974.258896][ T983] __should_failslab+0x121/0x190 [ 974.269529][ T983] should_failslab+0x9/0x14 [ 974.269546][ T983] kmem_cache_alloc_node+0x264/0x710 [ 974.269575][ T983] __alloc_skb+0xd5/0x5e0 [ 974.269593][ T983] ? skb_trim+0x190/0x190 [ 974.269615][ T983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.279019][ T983] ? netlink_autobind.isra.0+0x228/0x310 [ 974.279040][ T983] netlink_sendmsg+0x97b/0xd70 [ 974.279062][ T983] ? netlink_unicast+0x720/0x720 [ 974.279083][ T983] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 974.288664][ T983] ? apparmor_socket_sendmsg+0x2a/0x30 [ 974.288681][ T983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.288697][ T983] ? security_socket_sendmsg+0x93/0xc0 [ 974.288712][ T983] ? netlink_unicast+0x720/0x720 [ 974.288734][ T983] sock_sendmsg+0xdd/0x130 [ 974.299274][ T983] ___sys_sendmsg+0x806/0x930 [ 974.299295][ T983] ? copy_msghdr_from_user+0x430/0x430 [ 974.299323][ T983] ? kasan_check_read+0x11/0x20 [ 974.299344][ T983] ? __fget+0x381/0x550 [ 974.309714][ T983] ? ksys_dup3+0x3e0/0x3e0 [ 974.309730][ T983] ? lock_downgrade+0x880/0x880 [ 974.309757][ T983] ? __fget_light+0x1a9/0x230 [ 974.320220][ T983] ? __fdget+0x1b/0x20 [ 974.320236][ T983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 974.320259][ T983] __sys_sendmsg+0x105/0x1d0 [ 974.320285][ T983] ? __ia32_sys_shutdown+0x80/0x80 [ 974.331964][ T983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 974.331980][ T983] ? do_syscall_64+0x26/0x610 [ 974.332002][ T983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.342360][ T983] ? do_syscall_64+0x26/0x610 [ 974.342385][ T983] __x64_sys_sendmsg+0x78/0xb0 [ 974.342408][ T983] do_syscall_64+0x103/0x610 [ 974.351486][ T983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.351499][ T983] RIP: 0033:0x457e29 [ 974.351514][ T983] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.351529][ T983] RSP: 002b:00007ff180ecbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.361804][ T983] RAX: ffffffffffffffda RBX: 00007ff180ecbc90 RCX: 0000000000457e29 [ 974.361814][ T983] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 974.361823][ T983] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 974.361833][ T983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180ecc6d4 [ 974.361842][ T983] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 06:26:05 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000040)='veth1\x00'}) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0xfffffffffffffe95) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x15}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44051}, 0x4000000) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc5f123c123f3188b07008ca4adf014869fa7c21c0f90de9656f3ee27669a06f108518a6f978486ce0655117491777015115e7866494c41f19a7ffed23ed57eb86f186e2b371b6a2c07c61e3c35d04235a749d8fed39954288ef384c2b131dd96d20d20d1a684d73d2f8b3b91ce421afb09d919f0608c3e13cf4533e56408dd85ee0b2d2d723cc2161deb0c1f7d7933f8d635a0a3ad2f876478518a7063e42095f0eb3190d48a983d560171ec452d09940059bb12836f2c7dc0042c66e0b967cecdd07a4d94a8447fdeb5bbfcf86ff7752ee777a9dd0f7926b0db00ef17a1977") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:26:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:05 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:05 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 976.545475][ T999] FAULT_INJECTION: forcing a failure. [ 976.545475][ T999] name failslab, interval 1, probability 0, space 0, times 0 [ 976.556717][ T1001] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 976.569286][ T999] CPU: 0 PID: 999 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 976.578152][ T999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.588230][ T999] Call Trace: [ 976.591546][ T999] dump_stack+0x172/0x1f0 [ 976.595903][ T999] should_fail.cold+0xa/0x15 [ 976.600509][ T999] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 976.600544][ T999] ? ___might_sleep+0x163/0x280 [ 976.611177][ T999] __should_failslab+0x121/0x190 [ 976.616150][ T999] should_failslab+0x9/0x14 [ 976.620681][ T999] kmem_cache_alloc_node_trace+0x270/0x720 [ 976.626506][ T999] __kmalloc_node_track_caller+0x3d/0x70 [ 976.626529][ T999] __kmalloc_reserve.isra.0+0x40/0xf0 [ 976.626550][ T999] __alloc_skb+0x10b/0x5e0 [ 976.626567][ T999] ? skb_trim+0x190/0x190 [ 976.626587][ T999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.626601][ T999] ? netlink_autobind.isra.0+0x228/0x310 [ 976.626622][ T999] netlink_sendmsg+0x97b/0xd70 [ 976.626645][ T999] ? netlink_unicast+0x720/0x720 [ 976.626661][ T999] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 976.626681][ T999] ? apparmor_socket_sendmsg+0x2a/0x30 [ 976.626696][ T999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.626712][ T999] ? security_socket_sendmsg+0x93/0xc0 [ 976.626731][ T999] ? netlink_unicast+0x720/0x720 [ 976.652664][ T999] sock_sendmsg+0xdd/0x130 [ 976.652685][ T999] ___sys_sendmsg+0x806/0x930 [ 976.652705][ T999] ? copy_msghdr_from_user+0x430/0x430 [ 976.652732][ T999] ? kasan_check_read+0x11/0x20 [ 976.652754][ T999] ? __fget+0x381/0x550 [ 976.652778][ T999] ? ksys_dup3+0x3e0/0x3e0 [ 976.652792][ T999] ? lock_downgrade+0x880/0x880 [ 976.652818][ T999] ? __fget_light+0x1a9/0x230 [ 976.652836][ T999] ? __fdget+0x1b/0x20 [ 976.652857][ T999] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 976.668161][ T999] __sys_sendmsg+0x105/0x1d0 [ 976.668196][ T999] ? __ia32_sys_shutdown+0x80/0x80 [ 976.668230][ T999] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 976.668246][ T999] ? do_syscall_64+0x26/0x610 [ 976.668262][ T999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.668276][ T999] ? do_syscall_64+0x26/0x610 [ 976.668299][ T999] __x64_sys_sendmsg+0x78/0xb0 [ 976.668318][ T999] do_syscall_64+0x103/0x610 [ 976.668338][ T999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.668356][ T999] RIP: 0033:0x457e29 [ 976.691011][ T999] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 976.691021][ T999] RSP: 002b:00007ff180eecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.691036][ T999] RAX: ffffffffffffffda RBX: 00007ff180eecc90 RCX: 0000000000457e29 [ 976.691046][ T999] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 976.691055][ T999] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 06:26:05 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x3f00, 0x0) 06:26:05 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000001600000000000000000000000000000000000000000000000000"], 0x21) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 976.691064][ T999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180eed6d4 [ 976.691073][ T999] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 [ 976.986983][ T1020] FAULT_INJECTION: forcing a failure. [ 976.986983][ T1020] name failslab, interval 1, probability 0, space 0, times 0 06:26:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000019c0)="0adc1f123c123f3188b070") mlockall(0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x101040, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r7) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)=' ') r8 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) read(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x3, @mcast2}, @in={0x2, 0x4e20, @local}], 0x3c) dup2(r2, r8) tkill(r1, 0x1000000000016) bind(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x3, 0x1, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x80) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) 06:26:05 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1000000001b, &(0x7f0000000000)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 977.094360][ T1020] CPU: 1 PID: 1020 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 977.103337][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.113396][ T1020] Call Trace: [ 977.116733][ T1020] dump_stack+0x172/0x1f0 [ 977.121091][ T1020] should_fail.cold+0xa/0x15 [ 977.125708][ T1020] ? debug_smp_processor_id+0x3c/0x280 [ 977.131202][ T1020] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 977.137064][ T1020] __should_failslab+0x121/0x190 [ 977.142015][ T1020] should_failslab+0x9/0x14 [ 977.146526][ T1020] kmem_cache_alloc+0x47/0x6f0 [ 977.151302][ T1020] ? lock_acquire+0x16f/0x3f0 [ 977.155989][ T1020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.162249][ T1020] skb_clone+0x150/0x3b0 [ 977.166509][ T1020] netlink_deliver_tap+0x95c/0xc00 [ 977.171644][ T1020] netlink_unicast+0x5a7/0x720 [ 977.176424][ T1020] ? netlink_attachskb+0x770/0x770 [ 977.181550][ T1020] ? _copy_from_iter_full+0x259/0x8f0 [ 977.186938][ T1020] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 977.192665][ T1020] ? __check_object_size+0x3d/0x42f [ 977.197892][ T1020] netlink_sendmsg+0x8ae/0xd70 [ 977.202672][ T1020] ? netlink_unicast+0x720/0x720 [ 977.207625][ T1020] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 977.213195][ T1020] ? apparmor_socket_sendmsg+0x2a/0x30 [ 977.218667][ T1020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.224922][ T1020] ? security_socket_sendmsg+0x93/0xc0 [ 977.230390][ T1020] ? netlink_unicast+0x720/0x720 [ 977.235337][ T1020] sock_sendmsg+0xdd/0x130 [ 977.239766][ T1020] ___sys_sendmsg+0x806/0x930 [ 977.244455][ T1020] ? copy_msghdr_from_user+0x430/0x430 [ 977.249937][ T1020] ? kasan_check_read+0x11/0x20 [ 977.254803][ T1020] ? __fget+0x381/0x550 [ 977.258987][ T1020] ? ksys_dup3+0x3e0/0x3e0 [ 977.263411][ T1020] ? lock_downgrade+0x880/0x880 [ 977.268282][ T1020] ? __fget_light+0x1a9/0x230 [ 977.272967][ T1020] ? __fdget+0x1b/0x20 [ 977.277045][ T1020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 977.283304][ T1020] __sys_sendmsg+0x105/0x1d0 [ 977.287906][ T1020] ? __ia32_sys_shutdown+0x80/0x80 [ 977.293041][ T1020] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 977.298512][ T1020] ? do_syscall_64+0x26/0x610 [ 977.303208][ T1020] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.309290][ T1020] ? do_syscall_64+0x26/0x610 [ 977.313986][ T1020] __x64_sys_sendmsg+0x78/0xb0 [ 977.318761][ T1020] do_syscall_64+0x103/0x610 [ 977.323377][ T1020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.329279][ T1020] RIP: 0033:0x457e29 06:26:06 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 977.333196][ T1020] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 977.352815][ T1020] RSP: 002b:00007ff180eecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.361234][ T1020] RAX: ffffffffffffffda RBX: 00007ff180eecc90 RCX: 0000000000457e29 [ 977.369218][ T1020] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 977.377203][ T1020] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 977.385197][ T1020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180eed6d4 06:26:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x1000000, 0x0) [ 977.393178][ T1020] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 [ 977.406096][ T1020] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:06 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 977.511458][ T1055] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x3f000000, 0x0) [ 977.611569][ T1070] FAULT_INJECTION: forcing a failure. [ 977.611569][ T1070] name failslab, interval 1, probability 0, space 0, times 0 [ 977.680396][ T1070] CPU: 0 PID: 1070 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 977.689866][ T1070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.699929][ T1070] Call Trace: [ 977.703242][ T1070] dump_stack+0x172/0x1f0 [ 977.707595][ T1070] should_fail.cold+0xa/0x15 [ 977.712232][ T1070] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 977.718061][ T1070] ? ___might_sleep+0x163/0x280 [ 977.722924][ T1070] __should_failslab+0x121/0x190 [ 977.727878][ T1070] should_failslab+0x9/0x14 [ 977.732393][ T1070] kmem_cache_alloc_node+0x264/0x710 [ 977.737736][ T1070] ? mutex_trylock+0x1e0/0x1e0 [ 977.742508][ T1070] ? lock_acquire+0x16f/0x3f0 [ 977.747208][ T1070] ? __netlink_dump_start+0x5ac/0x7e0 [ 977.752595][ T1070] __alloc_skb+0xd5/0x5e0 [ 977.756943][ T1070] ? skb_trim+0x190/0x190 [ 977.761291][ T1070] netlink_dump+0x724/0xfb0 [ 977.765809][ T1070] ? netlink_broadcast+0x50/0x50 [ 977.770757][ T1070] ? lock_downgrade+0x880/0x880 [ 977.775633][ T1070] __netlink_dump_start+0x5b4/0x7e0 [ 977.780847][ T1070] rtnetlink_rcv_msg+0x73f/0xb00 [ 977.785795][ T1070] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 977.791090][ T1070] ? rtnetlink_put_metrics+0x560/0x560 [ 977.796560][ T1070] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 977.801854][ T1070] ? netlink_deliver_tap+0x22d/0xc00 [ 977.807154][ T1070] ? find_held_lock+0x35/0x130 [ 977.811949][ T1070] netlink_rcv_skb+0x17a/0x460 [ 977.816733][ T1070] ? rtnetlink_put_metrics+0x560/0x560 [ 977.816752][ T1070] ? netlink_ack+0xb50/0xb50 [ 977.816771][ T1070] ? kasan_check_read+0x11/0x20 [ 977.816791][ T1070] ? netlink_deliver_tap+0x254/0xc00 [ 977.816814][ T1070] rtnetlink_rcv+0x1d/0x30 [ 977.816829][ T1070] netlink_unicast+0x536/0x720 [ 977.816849][ T1070] ? netlink_attachskb+0x770/0x770 [ 977.826881][ T1070] ? _copy_from_iter_full+0x259/0x8f0 [ 977.826899][ T1070] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 977.826914][ T1070] ? __check_object_size+0x3d/0x42f [ 977.826936][ T1070] netlink_sendmsg+0x8ae/0xd70 [ 977.826958][ T1070] ? netlink_unicast+0x720/0x720 [ 977.826974][ T1070] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 977.826994][ T1070] ? apparmor_socket_sendmsg+0x2a/0x30 [ 977.827015][ T1070] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.894512][ T1070] ? security_socket_sendmsg+0x93/0xc0 [ 977.899985][ T1070] ? netlink_unicast+0x720/0x720 [ 977.904937][ T1070] sock_sendmsg+0xdd/0x130 [ 977.909371][ T1070] ___sys_sendmsg+0x806/0x930 [ 977.914060][ T1070] ? copy_msghdr_from_user+0x430/0x430 [ 977.919544][ T1070] ? kasan_check_read+0x11/0x20 [ 977.924411][ T1070] ? __fget+0x381/0x550 [ 977.928586][ T1070] ? ksys_dup3+0x3e0/0x3e0 [ 977.933007][ T1070] ? lock_downgrade+0x880/0x880 [ 977.937885][ T1070] ? __fget_light+0x1a9/0x230 [ 977.942583][ T1070] ? __fdget+0x1b/0x20 [ 977.946662][ T1070] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 977.952916][ T1070] __sys_sendmsg+0x105/0x1d0 [ 977.957522][ T1070] ? __ia32_sys_shutdown+0x80/0x80 [ 977.962659][ T1070] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 977.968133][ T1070] ? do_syscall_64+0x26/0x610 [ 977.972815][ T1070] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 06:26:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 977.978891][ T1070] ? do_syscall_64+0x26/0x610 [ 977.983586][ T1070] __x64_sys_sendmsg+0x78/0xb0 [ 977.988360][ T1070] do_syscall_64+0x103/0x610 [ 977.992962][ T1070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.998890][ T1070] RIP: 0033:0x457e29 [ 978.002795][ T1070] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.022403][ T1070] RSP: 002b:00007ff180eecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:26:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x8000000000, 0x0) [ 978.030824][ T1070] RAX: ffffffffffffffda RBX: 00007ff180eecc90 RCX: 0000000000457e29 [ 978.038803][ T1070] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 978.046778][ T1070] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 978.054750][ T1070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180eed6d4 [ 978.062728][ T1070] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 06:26:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:06 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 978.160366][ T1095] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 978.317587][ T1109] FAULT_INJECTION: forcing a failure. [ 978.317587][ T1109] name failslab, interval 1, probability 0, space 0, times 0 [ 978.348988][ T1109] CPU: 1 PID: 1109 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 978.357936][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.367996][ T1109] Call Trace: [ 978.371306][ T1109] dump_stack+0x172/0x1f0 [ 978.375658][ T1109] should_fail.cold+0xa/0x15 [ 978.380270][ T1109] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 978.386090][ T1109] ? ___might_sleep+0x163/0x280 [ 978.390958][ T1109] __should_failslab+0x121/0x190 [ 978.395916][ T1109] should_failslab+0x9/0x14 [ 978.400428][ T1109] kmem_cache_alloc_node_trace+0x270/0x720 [ 978.406256][ T1109] __kmalloc_node_track_caller+0x3d/0x70 [ 978.411903][ T1109] __kmalloc_reserve.isra.0+0x40/0xf0 [ 978.417290][ T1109] __alloc_skb+0x10b/0x5e0 [ 978.421721][ T1109] ? skb_trim+0x190/0x190 [ 978.426066][ T1109] netlink_dump+0x724/0xfb0 [ 978.430583][ T1109] ? netlink_broadcast+0x50/0x50 [ 978.435530][ T1109] ? lock_downgrade+0x880/0x880 [ 978.440404][ T1109] __netlink_dump_start+0x5b4/0x7e0 [ 978.445617][ T1109] rtnetlink_rcv_msg+0x73f/0xb00 [ 978.450562][ T1109] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 978.455853][ T1109] ? rtnetlink_put_metrics+0x560/0x560 [ 978.461319][ T1109] ? rtnl_bridge_dellink+0x6d0/0x6d0 06:26:07 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:07 executing program 2: r0 = socket$inet(0x2, 0x7, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc080000003f3188e120") syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000000), 0xfffff, 0xfffffffffffffffb) [ 978.466617][ T1109] ? netlink_deliver_tap+0x22d/0xc00 [ 978.471902][ T1109] ? find_held_lock+0x35/0x130 [ 978.476661][ T1109] netlink_rcv_skb+0x17a/0x460 [ 978.481409][ T1109] ? rtnetlink_put_metrics+0x560/0x560 [ 978.486851][ T1109] ? netlink_ack+0xb50/0xb50 [ 978.491423][ T1109] ? kasan_check_read+0x11/0x20 [ 978.496271][ T1109] ? netlink_deliver_tap+0x254/0xc00 [ 978.501544][ T1109] rtnetlink_rcv+0x1d/0x30 [ 978.505949][ T1109] netlink_unicast+0x536/0x720 [ 978.510710][ T1109] ? netlink_attachskb+0x770/0x770 [ 978.515821][ T1109] ? _copy_from_iter_full+0x259/0x8f0 [ 978.521199][ T1109] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 978.526916][ T1109] ? __check_object_size+0x3d/0x42f [ 978.532103][ T1109] netlink_sendmsg+0x8ae/0xd70 [ 978.536868][ T1109] ? netlink_unicast+0x720/0x720 [ 978.541806][ T1109] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 978.547336][ T1109] ? apparmor_socket_sendmsg+0x2a/0x30 [ 978.552780][ T1109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 978.559002][ T1109] ? security_socket_sendmsg+0x93/0xc0 [ 978.564454][ T1109] ? netlink_unicast+0x720/0x720 [ 978.569396][ T1109] sock_sendmsg+0xdd/0x130 [ 978.573812][ T1109] ___sys_sendmsg+0x806/0x930 [ 978.578476][ T1109] ? copy_msghdr_from_user+0x430/0x430 [ 978.583939][ T1109] ? kasan_check_read+0x11/0x20 [ 978.588791][ T1109] ? __fget+0x381/0x550 [ 978.592935][ T1109] ? ksys_dup3+0x3e0/0x3e0 [ 978.597336][ T1109] ? lock_downgrade+0x880/0x880 [ 978.602178][ T1109] ? __fget_light+0x1a9/0x230 [ 978.606851][ T1109] ? __fdget+0x1b/0x20 [ 978.610903][ T1109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 978.617132][ T1109] __sys_sendmsg+0x105/0x1d0 [ 978.621727][ T1109] ? __ia32_sys_shutdown+0x80/0x80 [ 978.626848][ T1109] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 978.632289][ T1109] ? do_syscall_64+0x26/0x610 [ 978.636948][ T1109] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.643009][ T1109] ? do_syscall_64+0x26/0x610 [ 978.647707][ T1109] __x64_sys_sendmsg+0x78/0xb0 [ 978.652457][ T1109] do_syscall_64+0x103/0x610 [ 978.657034][ T1109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.662920][ T1109] RIP: 0033:0x457e29 [ 978.666816][ T1109] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.686402][ T1109] RSP: 002b:00007ff180eecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.694799][ T1109] RAX: ffffffffffffffda RBX: 00007ff180eecc90 RCX: 0000000000457e29 [ 978.702752][ T1109] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 978.710707][ T1109] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 978.718677][ T1109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180eed6d4 [ 978.726682][ T1109] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 [ 978.829915][ T1117] Invalid option length (1048562) for dns_resolver key 06:26:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) r3 = msgget$private(0x0, 0xc0) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000180)=""/241) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x7fffffff, 0x80000000}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x68, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:09 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:09 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0xfffffffffffffffd, @rand_addr="0f681be5b4b2ba8126af1bc8028da34d"}}}, 0x108) sendto$inet6(r0, &(0x7f0000000080)="389b5c33c89e1dd041b60b5fd0abfa0d2d6ca4915981a59cd4d784f5709cd4c76f45083e5b0fdf433da806e36132a2708e90897402aa561d23febf8f8c08ef9e653e1cdb98f07dc835c358ec46b322ebadaa12b832090799da315aa5c4185cd732a15a4cb2628660d9939469340d99e76d16ef126c4f2913dac39dac997fbc1401b3804371de9a18373e078e5901", 0x8e, 0x4, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @mcast1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipddp0\x00', r1}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 06:26:09 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 980.435559][ T1133] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:09 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xf, 0x100, 0x2, {0xff, 0x0, 0x40, 0x7307614e}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) setpriority(0x2, r3, 0x3) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9fc2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 980.489052][ T1132] FAULT_INJECTION: forcing a failure. [ 980.489052][ T1132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 980.502265][ T1132] CPU: 1 PID: 1132 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 980.511221][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.521284][ T1132] Call Trace: [ 980.524597][ T1132] dump_stack+0x172/0x1f0 [ 980.528956][ T1132] should_fail.cold+0xa/0x15 [ 980.533553][ T1132] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.539356][ T1132] ? __lock_acquire+0x548/0x3fb0 [ 980.544308][ T1132] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 980.550124][ T1132] ? kasan_slab_alloc+0xf/0x20 [ 980.554926][ T1132] ? kmem_cache_alloc_node+0x131/0x710 [ 980.560407][ T1132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.566677][ T1132] should_fail_alloc_page+0x50/0x60 [ 980.571895][ T1132] __alloc_pages_nodemask+0x1a1/0x7e0 [ 980.577318][ T1132] ? __alloc_pages_slowpath+0x2900/0x2900 [ 980.583050][ T1132] ? find_held_lock+0x35/0x130 [ 980.587856][ T1132] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.593675][ T1132] cache_grow_begin+0x9c/0x860 [ 980.598462][ T1132] ? __kmalloc_node_track_caller+0x3d/0x70 [ 980.604283][ T1132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 980.610541][ T1132] kmem_cache_alloc_node_trace+0x658/0x720 [ 980.616371][ T1132] __kmalloc_node_track_caller+0x3d/0x70 [ 980.622019][ T1132] __kmalloc_reserve.isra.0+0x40/0xf0 [ 980.627403][ T1132] __alloc_skb+0x10b/0x5e0 [ 980.631831][ T1132] ? skb_trim+0x190/0x190 [ 980.636210][ T1132] ? lock_downgrade+0x880/0x880 [ 980.641080][ T1132] netlink_dump+0x724/0xfb0 [ 980.645599][ T1132] ? netlink_broadcast+0x50/0x50 [ 980.650551][ T1132] ? lock_downgrade+0x880/0x880 [ 980.655430][ T1132] __netlink_dump_start+0x5b4/0x7e0 [ 980.660649][ T1132] rtnetlink_rcv_msg+0x73f/0xb00 [ 980.665602][ T1132] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 980.670895][ T1132] ? rtnetlink_put_metrics+0x560/0x560 [ 980.676365][ T1132] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 980.681646][ T1132] ? netlink_deliver_tap+0x22d/0xc00 [ 980.686917][ T1132] ? find_held_lock+0x35/0x130 [ 980.691667][ T1132] netlink_rcv_skb+0x17a/0x460 [ 980.696417][ T1132] ? rtnetlink_put_metrics+0x560/0x560 [ 980.701858][ T1132] ? netlink_ack+0xb50/0xb50 [ 980.706430][ T1132] ? kasan_check_read+0x11/0x20 [ 980.711264][ T1132] ? netlink_deliver_tap+0x254/0xc00 [ 980.716535][ T1132] rtnetlink_rcv+0x1d/0x30 [ 980.720942][ T1132] netlink_unicast+0x536/0x720 [ 980.725711][ T1132] ? netlink_attachskb+0x770/0x770 [ 980.730804][ T1132] ? _copy_from_iter_full+0x259/0x8f0 [ 980.736174][ T1132] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 980.741890][ T1132] ? __check_object_size+0x3d/0x42f [ 980.747073][ T1132] netlink_sendmsg+0x8ae/0xd70 [ 980.751839][ T1132] ? netlink_unicast+0x720/0x720 [ 980.756775][ T1132] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 980.762307][ T1132] ? apparmor_socket_sendmsg+0x2a/0x30 [ 980.767753][ T1132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.774005][ T1132] ? security_socket_sendmsg+0x93/0xc0 [ 980.779446][ T1132] ? netlink_unicast+0x720/0x720 [ 980.784384][ T1132] sock_sendmsg+0xdd/0x130 [ 980.788828][ T1132] ___sys_sendmsg+0x806/0x930 [ 980.793512][ T1132] ? copy_msghdr_from_user+0x430/0x430 [ 980.798975][ T1132] ? kasan_check_read+0x11/0x20 [ 980.803859][ T1132] ? __fget+0x381/0x550 [ 980.808014][ T1132] ? ksys_dup3+0x3e0/0x3e0 [ 980.812430][ T1132] ? lock_downgrade+0x880/0x880 [ 980.817411][ T1132] ? __fget_light+0x1a9/0x230 [ 980.822081][ T1132] ? __fdget+0x1b/0x20 [ 980.826147][ T1132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 980.832388][ T1132] __sys_sendmsg+0x105/0x1d0 [ 980.836991][ T1132] ? __ia32_sys_shutdown+0x80/0x80 [ 980.842098][ T1132] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 980.847541][ T1132] ? do_syscall_64+0x26/0x610 [ 980.852213][ T1132] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.858262][ T1132] ? do_syscall_64+0x26/0x610 [ 980.862944][ T1132] __x64_sys_sendmsg+0x78/0xb0 [ 980.867712][ T1132] do_syscall_64+0x103/0x610 [ 980.872288][ T1132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.878161][ T1132] RIP: 0033:0x457e29 [ 980.882049][ T1132] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.901640][ T1132] RSP: 002b:00007ff180eecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.910063][ T1132] RAX: ffffffffffffffda RBX: 00007ff180eecc90 RCX: 0000000000457e29 [ 980.918016][ T1132] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 980.925985][ T1132] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 980.933939][ T1132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180eed6d4 [ 980.941890][ T1132] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 [ 980.956300][ T1132] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:09 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:09 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x100000000000000, 0x0) 06:26:09 executing program 2: sysinfo(&(0x7f000000b500)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0xffffffffffffffff, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x62c}, 0xf) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0xa3, 0x289) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa00, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) [ 981.152220][ T1158] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x74, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 981.205238][ T1161] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 981.232502][ T1161] FAULT_INJECTION: forcing a failure. [ 981.232502][ T1161] name failslab, interval 1, probability 0, space 0, times 0 06:26:10 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 981.345498][ T1161] CPU: 0 PID: 1161 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190301 #1 [ 981.354467][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.364531][ T1161] Call Trace: [ 981.367842][ T1161] dump_stack+0x172/0x1f0 [ 981.372216][ T1161] should_fail.cold+0xa/0x15 [ 981.376825][ T1161] ? debug_smp_processor_id+0x3c/0x280 [ 981.382302][ T1161] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.388131][ T1161] __should_failslab+0x121/0x190 [ 981.393085][ T1161] should_failslab+0x9/0x14 [ 981.397600][ T1161] kmem_cache_alloc+0x47/0x6f0 [ 981.402380][ T1161] ? lock_acquire+0x16f/0x3f0 [ 981.407070][ T1161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.413326][ T1161] skb_clone+0x150/0x3b0 [ 981.417583][ T1161] netlink_deliver_tap+0x95c/0xc00 [ 981.422710][ T1161] ? skb_put+0x177/0x1d0 [ 981.426972][ T1161] __netlink_sendskb+0x63/0xd0 [ 981.431750][ T1161] netlink_dump+0xc56/0xfb0 [ 981.436274][ T1161] ? netlink_broadcast+0x50/0x50 [ 981.441241][ T1161] ? lock_downgrade+0x880/0x880 [ 981.446117][ T1161] __netlink_dump_start+0x5b4/0x7e0 [ 981.451336][ T1161] rtnetlink_rcv_msg+0x73f/0xb00 [ 981.456287][ T1161] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 981.461583][ T1161] ? rtnetlink_put_metrics+0x560/0x560 [ 981.467054][ T1161] ? rtnl_bridge_dellink+0x6d0/0x6d0 [ 981.472349][ T1161] ? netlink_deliver_tap+0x22d/0xc00 [ 981.477648][ T1161] ? find_held_lock+0x35/0x130 [ 981.482428][ T1161] netlink_rcv_skb+0x17a/0x460 [ 981.487219][ T1161] ? rtnetlink_put_metrics+0x560/0x560 [ 981.492694][ T1161] ? netlink_ack+0xb50/0xb50 [ 981.497300][ T1161] ? kasan_check_read+0x11/0x20 [ 981.502168][ T1161] ? netlink_deliver_tap+0x254/0xc00 [ 981.507492][ T1161] rtnetlink_rcv+0x1d/0x30 [ 981.511918][ T1161] netlink_unicast+0x536/0x720 [ 981.516698][ T1161] ? netlink_attachskb+0x770/0x770 [ 981.521817][ T1161] ? _copy_from_iter_full+0x259/0x8f0 [ 981.527236][ T1161] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 981.532966][ T1161] ? __check_object_size+0x3d/0x42f [ 981.538179][ T1161] netlink_sendmsg+0x8ae/0xd70 [ 981.542982][ T1161] ? netlink_unicast+0x720/0x720 [ 981.547927][ T1161] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 981.553485][ T1161] ? apparmor_socket_sendmsg+0x2a/0x30 [ 981.558954][ T1161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.565219][ T1161] ? security_socket_sendmsg+0x93/0xc0 [ 981.570693][ T1161] ? netlink_unicast+0x720/0x720 [ 981.575648][ T1161] sock_sendmsg+0xdd/0x130 [ 981.580077][ T1161] ___sys_sendmsg+0x806/0x930 [ 981.584770][ T1161] ? copy_msghdr_from_user+0x430/0x430 [ 981.590253][ T1161] ? kasan_check_read+0x11/0x20 [ 981.595119][ T1161] ? __fget+0x381/0x550 [ 981.599295][ T1161] ? ksys_dup3+0x3e0/0x3e0 [ 981.603723][ T1161] ? lock_downgrade+0x880/0x880 [ 981.608594][ T1161] ? __fget_light+0x1a9/0x230 [ 981.613298][ T1161] ? __fdget+0x1b/0x20 [ 981.617382][ T1161] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 981.623645][ T1161] __sys_sendmsg+0x105/0x1d0 [ 981.628248][ T1161] ? __ia32_sys_shutdown+0x80/0x80 [ 981.633387][ T1161] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 981.638857][ T1161] ? do_syscall_64+0x26/0x610 [ 981.643544][ T1161] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.649649][ T1161] ? do_syscall_64+0x26/0x610 [ 981.654349][ T1161] __x64_sys_sendmsg+0x78/0xb0 [ 981.659131][ T1161] do_syscall_64+0x103/0x610 [ 981.663738][ T1161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.669636][ T1161] RIP: 0033:0x457e29 [ 981.673541][ T1161] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.693589][ T1161] RSP: 002b:00007ff180eecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.702009][ T1161] RAX: ffffffffffffffda RBX: 00007ff180eecc90 RCX: 0000000000457e29 [ 981.709990][ T1161] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 981.717965][ T1161] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 981.725959][ T1161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff180eed6d4 [ 981.733935][ T1161] R13: 00000000004c54fc R14: 00000000004d93e0 R15: 0000000000000006 06:26:10 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x3f00000000000000, 0x0) 06:26:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:10 executing program 3 (fault-call:4 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 981.884802][ T1196] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000500)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000083f1de9bbe029a9182519ada93161aeabb1d92b3d26b592bfb7ae47ab5cfefbb2f78b5708805a5ee6eba5aa9af94bc6c09b8d26d98070c3c384cd610795026fcbf4c76387b65d8e0c890d79ec88559408c03d50a13b310b503cb07cb18fefa8d59aa3bcbdbdaa5a0b23baa0838b234bfa4f80252df945dc239d4342419a98a98e9477ff154c9a697cebf78838c5a2934", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000"], 0x14}}, 0x0) close(r2) [ 982.011672][ T1203] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:12 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0xd2577b34428e2922, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x400}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000600000000000000"], 0x21) creat(&(0x7f0000000000)='./file0\x00', 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:12 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0xffffffff00000000, 0x0) 06:26:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030010006a007deaff000c000200170022ff02f10000"], 0x2c}}, 0x0) 06:26:12 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 984.034654][ T1224] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 984.070222][ T1225] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 984.085323][ T1225] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 984.112458][ T1225] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 984.123273][ T1238] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 984.129280][ T1225] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 06:26:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x2, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:12 executing program 2: rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x22, &(0x7f0000000000)='GPLGPL,selinuxself\\user}:-trusted\x00', 0xffffffffffffffff}, 0x30) migrate_pages(r0, 0x6, &(0x7f0000000080)=0x2, &(0x7f0000000100)=0x7) [ 984.236355][ T1248] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @remote}}}, [0x71a, 0x4, 0x7, 0x0, 0x9, 0x0, 0x6, 0x1a4f, 0x0, 0x0, 0x6, 0xca, 0x0, 0x0, 0x4]}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00') setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r2, 0x1}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r0, 0x0, 0x15, &(0x7f0000000240)='com.apple.FinderInfo\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={&(0x7f0000000200), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000002600140828bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="010000000a00ffffffffffff04000a0004000a0004000a0004000a0004000a0004000a0004000a00"], 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x4d, 0x3fffc000000000, 0x4, 0x4, 0x0, 0x1ffc000000, 0x2000, 0x2, 0x6, 0x9, 0x3b, 0x8000, 0x1f, 0x40, 0xba, 0x401, 0x1, 0x80000000, 0x7, 0x5, 0x0, 0x820, 0x6, 0x5, 0x0, 0xe, 0x9, 0x7, 0x80000000, 0x3, 0x3, 0x3, 0x3, 0x50, 0x5, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf}, 0x10010, 0x10000, 0x4, 0x9, 0x3, 0x5, 0x7fff}, r6, 0xa, 0xffffffffffffffff, 0xa) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0xfffffffffffffee0) [ 984.307089][ T1254] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 984.324133][ T1255] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 984.430608][ T1263] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 984.479329][ T1264] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 984.490864][ T1267] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 984.500754][ T1263] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:15 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x25, 0x6, 0x15, 0xa, 0x0, 0x0, 0x1, 0x12c}) write$UHID_INPUT2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="040000007200609a3dddd7bf4f6eba8e33d06a71d5202922f2d31845d747b9d3a4b8ea2da08f01452b7d74e7ce19bc7ae88ea76fc5e78bdb069df8a760f7582652b64ca87735aecec94fec22e9237508350eb1f050a1558d3849ca8efce1499e160e573631d52674811a810a3e189386db4e89086e489a62"], 0x78) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000008000000000000000000ff0000a11dadea40980000000000000000a4b598b4527e19a9d045c41a59a686bf538caddacf76d864ed2c07f059add9a86650f86cb0e57c756242ba14d6"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="f4047ba3f05ba92724b1ca28a498862108d8c6046a4392da6d1b2f12b68e852964c6aa9af24bfa74180944d1ff29d00b4fcdd354784b29be44879d51494098920692f83ca6cebb2f402242836e076c9f94ff9176de199ea92ed8f0a7f150f8d5c6cbe0309f52fdb1577fca0c13ded73cfdf1edbe9bce6577eccfd4d1e08397e2d29a7b7ff62b27279424a9d1658e88") 06:26:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:15 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000780)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x8, 0x7ff, 0x3, 0x4, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff, 0xda67bd571ec93f33) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3f, 0x800) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3, 0x200) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000180)="16af3961f09a407bb0d2be6f7e48f2a63821edcb70bb67ff6448a847e6c068a481bc1b90a844c917273ea6390380bdd9011746379344dc13dcf162098c6c6466ab604c8dc915211899ed524816c44acc6a35bc40073801599e6dfa75ae73bfc4dbe39588b5be16a2913b83b21454bc8248c35338fbde573fe6038c6ee7a817514480cc917e5873de7946d4a7f316148f01a5ea91a8307e632724edf869277600cfd97d1bf768d49dff0d2aad1abf3f9c8e147487964eb2a01fcf727a5420d906d6c92176", 0xc4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000280)=""/161) 06:26:15 executing program 5: clone(0x20000001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000040)={0x8000000, 0xba200000000000, 0x1}) write$cgroup_pid(r2, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000140)) tkill(r0, 0x1c) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000080)={{0x9, 0xbe, 0x5, 0x49, 0xb341, 0x80}, 0x3}) wait4(0x0, 0x0, 0x0, 0x0) 06:26:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e00)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) r3 = dup3(r2, r0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0x1ff) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000100)={0x2, 0x45, &(0x7f0000000080)="9b06a00d96ac2864141b39b16d04d1d029faf88e009df83a44838d9374896e7bbc993335d29f5a968b5370c6c820412b62594536b5078276d787f4305ee53bfa8cd5ffda81"}) [ 987.118726][ T1282] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 987.131570][ T1281] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x5, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 987.202547][ T1299] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 987.217356][ T1281] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x700, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:16 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x222800, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000240)={0x4, 0x5, 0x6}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000400)=[{0x2, 0xb5, 0x10, 0x200, @time={0x77359400}, {0x1, 0x200}, {0x4, 0x800}, @time=@time={r3, r4+10000000}}, {0xffff, 0x3, 0x7, 0x2, @tick=0x4185, {0x9, 0x4}, {0x0, 0x1}, @result={0x5, 0x4}}, {0x100000001, 0x2397, 0x40, 0x0, @tick=0x7, {0xfffffffffffffffa, 0x9}, {0xefd1, 0x5}, @note={0xffffffffffffabd9, 0x7, 0x5, 0x100, 0x5}}], 0x90) recvmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/183, 0x45}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) 06:26:16 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(r0, 0x0, 0x3fffffffffc, 0x0) [ 987.343829][ T1317] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 987.362972][ T1319] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x838, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 987.407522][ T1321] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 987.524019][ T1332] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:18 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x80000000000000, 0x1, 0x6, 0x2, 0x400, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0xfffffffffffffff9, 0x7, 0xa8b, 0x101}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x1}, 0x8) 06:26:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000800)={0x5, 0x7ff, 0x1000, 0x800, 0xffffffffffffff9c}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x4, 0x20000) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000840)={'ip6tnl0\x00', {0x2, 0x4e24, @multicast1}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000400)={0x100400000000002, 0x3, 0x2, 0x9, 0x5, 0x80}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x99}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x800}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000001c0)) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0), 0x4) move_pages(r1, 0x8, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f000090c000/0x2000)=nil, &(0x7f000090a000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000909000/0x4000)=nil], &(0x7f0000000100)=[0x0, 0x2, 0x5], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4) r6 = userfaultfd(0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x4, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='J', 0x1, 0x4004084, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) read$alg(r5, &(0x7f0000000300)=""/33, 0x21) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) read(r6, &(0x7f0000009f9c)=""/100, 0x64) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000a80)={0xa20000, 0x80000000, 0x7, [], &(0x7f0000000a40)={0xa00001, 0x9, [], @value64=0x3}}) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000003c0)={0x5, &(0x7f0000000280)=""/33, &(0x7f0000000780)=[{0x623f4cb7, 0xfc, 0x5, &(0x7f0000000480)=""/252}, {0x1000, 0x8b, 0x9, &(0x7f0000000580)=""/139}, {0x9000000000, 0xa1, 0x400, &(0x7f0000000640)=""/161}, {0x2, 0x1c, 0x80000001, &(0x7f0000000340)=""/28}, {0x3, 0x73, 0xfff, &(0x7f0000000700)=""/115}]}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) 06:26:18 executing program 5: clone(0x40200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) geteuid() r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x81, 0x2000) fcntl$setown(r1, 0x8, r0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) tkill(r0, 0x20) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x8, {0x7, 0x1c, 0x7fffffff, 0x100000, 0x1f, 0x8000, 0x5, 0x3ff}}, 0x50) wait4(0x0, 0x0, 0x0, 0x0) fcntl$getflags(r1, 0x1) 06:26:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:18 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 990.175910][ T1350] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 990.197935][ T1354] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 990.252305][ T1355] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000bd33123960733b000000000000a9020005000000e73727463748830b91e8595586fedf3a262e6f33b5399d2d5c0f3fbd"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 990.416729][ T1377] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 990.498939][ T1383] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() keyctl$session_to_parent(0x12) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x8) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0xfffffffffffffffe, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:19 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000000)='(Ikeyring\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=r1, 0x4) [ 990.549740][ T1390] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x8, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:19 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000ac0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000880)={0xffff, 0xe83a, 0x200, 0x31, 0x4, 0xf1, 0x3, 0x200, r1}, &(0x7f00000008c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000900)={r2, @in6={{0xa, 0x4e20, 0x1f, @empty, 0x4}}, 0x29c0, 0x6}, &(0x7f00000009c0)=0x90) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fgetxattr(r3, &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000600)=""/88, 0x58) write$P9_RRENAMEAT(r3, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) r4 = gettid() getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x20) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000200)={'ifb0\x00', {0x2, 0x4e21, @local}}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x868, &(0x7f0000000b00)=ANY=[@ANYBLOB='trcns=unix,fscache,Noextend,cachetag=-,appraise_type=imasig,euid>', @ANYRESDEC=r6, @ANYBLOB="2c6d61736b3d5e4d41595f455845432c7375626a5f747970653d69666230002c00639ce7327278b2d1417df048b926eb15e685f0a49488ef1ca54ced83141180b6650d9aa8edbaf621ab5c0b48101b71bb694586944915b50fb9fa25f5697d6f4d2be0ed68912f63d0b1ce6a04b622a4a80c0da0ca603c264ea5f5da0a9611c85b47ce084447317278c172b025ced2bddfe7433c21d2b60924a8fc03c353fa05239474230ad2d66cf504ccefab099ad9c15a6c39043af5b3f3b1b293ccde3d395d9834af553b000000000000009ec736b6"]) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa95e) wait4(0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00') getcwd(&(0x7f0000000240)=""/208, 0xd0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000340)={0x0, [0x3, 0x101, 0x9, 0x0, 0x4, 0x8001, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x400, 0x100000001, 0x8, 0xaf, 0x7ff, 0xef, 0x7c, 0x81, 0x1, 0x2, 0x8000, 0x80, 0x1, 0x7f, 0x4, 0x4, 0x75, 0xc7, 0x4, 0x80000001, 0xfff, 0x7, 0x0, 0x100000001, 0x4, 0x5, 0x800, 0x0, 0x2, 0x200, 0x9, 0x8, 0x40, 0x3, 0xffffffffffffff58, 0x7, 0xffffffff80000000, 0x8], 0xf}) [ 990.692456][ T1403] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001, 0x0, 0x832}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000bf4e28056d92f734000000000000000000000000000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/217) [ 990.821048][ T1418] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 990.872047][ T1413] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:19 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xd00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:19 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f00000000c0)='crc32-generic\x00', 0xe, 0x3) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffd58) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xa, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) recvfrom$x25(r0, &(0x7f0000000000)=""/43, 0x2b, 0x0, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) [ 991.068941][ T1445] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 991.158106][ T1453] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 991.183533][ T1453] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:19 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x4, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 991.282114][ T1468] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0xc, 0x0) 06:26:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf23, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 991.408846][ T1481] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 991.436985][ T1485] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 991.562283][ T1495] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:20 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xe, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x4, 0xff, 0x4, 0x735}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xffff, 0x401}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r3, 0x4, 0x0, 0x5}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 06:26:20 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0x80007c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1ff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x4, 0x4}, &(0x7f00000002c0)=0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00') ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)) 06:26:22 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x5, 0x1a, 0x100000001, 0x81, "e1fc73f77ae34c808b95add84dcfa86e689cf081bf899589b8beda9cc9144bdc"}) 06:26:22 executing program 2: r0 = socket(0xa, 0x200000000000002, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1000, 0x440000) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 06:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:22 executing program 5: clone(0x8000040000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:22 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x80101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000700)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x0, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(&(0x7f0000000ac0)=ANY=[], &(0x7f00000006c0)='./file0\x00', &(0x7f0000000440)='rpc_pipefs\x00', 0x100000, &(0x7f0000000940)='a\xe5\xeb\xc4pX\x96\xd2\xc8k\xf6\xb1\v\xdd\xe7\xa5\xd7u/\x92;vE)\x8e\xefp\a\xa36rA\x8c\x1a\xad\xab\x81\xdbj`\xf4\x1a|\x80\xe5{\x97\xaeQj\x92|\xd5\xfc\x1aQe\xfe2\x98B\x9d\x10\x8a0\xbd\xde\xc8r\x85I\fl9\x96\x1f\xc4l\xaeCuyK\xe7\x8c\x1c\x86\x93\xb2e\xfc\n\x12\xc6\xbc#\xac3\x9a\xed\x05\xb0*:\xef\x85l\xe4\xbe#d\xe2_+\xc0\xd2?0*@\xf1\xfe\xa0\xe2\x14') mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f00002b9ff8), &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r4 = dup2(r2, r2) ioctl$TCSBRKP(r3, 0x5425, 0x8e9) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r3, 0x2, &(0x7f0000000640)) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000007c0)) [ 994.084708][ T1549] validate_nla: 1 callbacks suppressed [ 994.084733][ T1549] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 994.112707][ T1556] IPVS: ftp: loaded support on port[0] = 21 06:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 994.160042][ T1549] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x230f, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x48, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 994.368205][ T1589] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3808, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4c, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 994.507819][ T1556] IPVS: ftp: loaded support on port[0] = 21 [ 994.646681][ T1606] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 994.712462][ T1606] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x1, @multicast1, 0x4e22, 0x0, 'sh\x00', 0x8, 0xb43, 0x6f}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e24, 0x10000, 0x20, 0x6, 0x100}}, 0x44) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000180)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x618000, 0x0) 06:26:25 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x181002, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3314, 0x0) 06:26:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3f00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x60, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:25 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) connect$rose(r0, &(0x7f0000001180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tee(r0, r0, 0x3c2e, 0xb) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x1015, 0x0, 0x9c0, "d0feccb0aea33d88154656eea192c70e", "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"}, 0xfffffffffffffea5, 0x3) writev(r0, &(0x7f0000001400)=[{&(0x7f0000001200)="a651fdbcefbfa97f2b9b36cb1ea7734e681ec90692fb0355e9bca31c3ab52ad953230aecabb505b69b7479c6a4c8cad5da8db110381f0eca", 0x38}, {&(0x7f0000001240)="e38998184f234b28ecc54e1370bc1098c34112a947afd83f5683e337172f19a1afd1484f19ad429adb320ee280461699bb80aee2ee5def6e073438dfb7d8f3db1a05b1c0c1ab21beebfa00f05719794f54e4b555c6c2930597f1760e9a27d831ad63ff43dd78eebc24657d7256a2d4c44c36ab0ada65f0c5ba98090e189b7b7a47", 0x81}, {&(0x7f0000001300)="855bd788ea89b411c47ac6a8079eb01ce5c2c830ce84efa0aeab4aeb859638ee7af1eb813e993a7d388e07a3bcb81895e59ea12e295fba143c20d27cadd0b9b9eff88000eb866bc8b900455e9c2656b8e90716be593fc50c4272e2e31df089ea8bdb9aa0d4deb1d0505847e06d58e2b88c90e2c3460956e5c0336b6c69830ede3cc0fb8f202eb4fc1e64bb9d7a1ffed70b45ba1605d6dd13ec081266f56c77c0f4bc588df74fbe3bffe97c202fde6580b408f84c6344954bb9fe2ddc8cc15b1da44e30ccc36d70734b3dff0680bae12314cb13fa5bae8a68fccb95a985537f", 0xdf}], 0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={0x0, r0, 0xf, 0x2}, 0x14) 06:26:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x809, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x4, 0x6, 0xc7a, 0x47, 0x1, 0x7}) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c) [ 997.139232][ T1622] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 997.181505][ T1629] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002 [ 997.199234][ T1632] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002 06:26:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 997.228794][ T1630] __nla_parse: 9 callbacks suppressed [ 997.228805][ T1630] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 997.246537][ T1620] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:25 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001500)='net/mcfilter\x00') sendmsg$nl_generic(r1, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10002010}, 0xc, &(0x7f00000018c0)={&(0x7f0000001580)={0x30c, 0x12, 0x900, 0x70bd2a, 0x25dfdbfe, {0x1}, [@nested={0x2f8, 0x8e, [@generic="86e1d88f81b5178ed9e52173ebcb2b1ea65ff7b7631337671a069f66ad1bb1604ab2a682cb774406378480bc1b88a0bf42c48208d8a6f1691ea356ed36ad334b62d98b78281348afbd5f185bfa20611566d3f34b84db1acb6f61fe63235525caf792d402b9052ad84dbd1bd01f940a42c2baf3b884a64b3dcf475762fa8892a919364c426e0b8e25d29a2734449444b2c0bbaba47e0ee404cc5ee68ceee178b104b66a793c9bb61befd32957e4d463db7c17e478b30d7d5e332da1ab4a4934fc57f29fda2a22950fdf381cae6e97fcf69b74bc4a1229e58b0a0ef1b249b5f3bd9f0e21109cd5f61c062eb7e35e6dcf7e3f4ef9", @typed={0x8, 0x95, @fd=r0}, @generic="f0879564b581787c7bbec9dcb7f3486fd8b0bf3f605f73dc9c198483d4fba82b54546da0dfd9009813a61cb9a58b83bfe2bfe047e8c76569db59ff24cc63b17c8276b9a333700c0dfbb9446aa2f2c3f9ed37261b1afac6de8fe4502b62bbefba79c10ebd3a66abd2479bafc8f37e08cb8820ae9c1fa0a8391df582c9d9313bb08f3d97f3f5344e0f9a5bb22735d24edcf4de54a0e599b3ff55763074c102ec7881d265ee97a72172365cc5a1926540", @generic="b9b1caf4ce39ea10054124b8a955ec39f362383c81d783fb027f", @generic="c81f9afc47608d8d5f2f53520e690aebcc8b", @generic="fb18c4a27f1031e296381c4a4b14d5df0df83b0abb6950d5dff100f2c5dfc998987c949825e1216411a1b8ee51abb8995303cb7fdc65b720016fefbba151c2219fc2d87cd0d8b5b9a151c0ba9c1002e873eed6427de946ccf4e1df8fb97d0b69e3df9c2302ef75fdeb70d0606ffa9c1b3a4f16fa5686b8d3f804e64adbc6c6a8d13188a0c4b1583bf78eda9619707972d172cec6d8e6015de4a5df537d2ea3791464a6dfbe9db19e527af17d74", @generic="9ae79e6db2f049e9d5681eb0b680577cb32e48715f6ed12b942317534b751de9c9b17290d335bfe8f6b82f37773c1d73b7f4cc1bf605e024d62efb6c10dff17709837a501eda5efd080c5c2bff6bdc6b52efb360fa568797a3adbdab8736f8cfbce01d9001669d1fc30fe92001b68e"]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x895}, 0x1) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={0x0, 0x4, 0x3, 0x7c, &(0x7f0000ffb000/0x4000)=nil, 0xaa}) bind(r0, &(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0911a6a54c7a0000000000008800450000280000000000069078ac1414aa00006bd0d2d7c54a4ac51d54a32aa87030a3964d8dbd5734cf11a942f228128d319066ba06765e6bb616024750b73382cf203117ccd4d5f210bcdb7ebf89735924c7d4ddce68c893234309a886636bc91f741af2ba9b53d094b8dbf1b1059abcf30622f1e3ef6656", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 06:26:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x68, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:26 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x400000020) wait4(0x0, 0x0, 0x0, 0x0) [ 997.356704][ T1651] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4800, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 997.465873][ T1658] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 997.489760][ T1663] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 997.569508][ T1668] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000f2d886c400000000000000034d516c000000000000800000001f000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:28 executing program 2: socketpair$unix(0x1, 0x80000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x84, 0x4, 0x0, 0x4) 06:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6c, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4c00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0) write$P9_RWALK(r2, &(0x7f0000000040)={0x64, 0x6f, 0x2, {0x7, [{0x20, 0x1, 0x4}, {0x80, 0x2, 0x3}, {0x4, 0x4, 0x8}, {0x1, 0x2, 0x5}, {0x18, 0x1}, {0x20, 0x2, 0x5}, {0x4, 0x3, 0x4}]}}, 0x64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:28 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:28 executing program 2: r0 = semget(0x1, 0x0, 0x8) semop(r0, &(0x7f0000000040), 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='projid_map\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @ib={0x1b, 0xab, 0xeaa5, {"b1546832a7f6704063e0b6fd1510bdbb"}, 0x3, 0x2, 0x6}}}, 0x90) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x37c, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x100, 0x101, 0x401, 0x80}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={r5, 0x800, 0x200, 0x9}, &(0x7f0000000240)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40087543, &(0x7f0000000000)={0xffffffffffffffff, 0x300, 0x1}) [ 1000.226259][ T1685] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1000.245777][ T1688] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1000.288597][ T1695] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5865, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x74, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000e600000000000000000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:29 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) capget(&(0x7f00000001c0)={0x20080522}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) fsync(r0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000280)={0x6}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)={0x3, 'dgn'}, 0x4) ptrace$setregset(0x4205, r2, 0x201, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0xe2e) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x802000001, 0x0, 0x5, 0xffffffff80000000, r2}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) ptrace$setregset(0x4205, r2, 0x3, 0x0) io_setup(0x20, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4bc, 0xc141, 0x81, 0x7, 0x0, 0xffffffffffff43a5, 0x1000, 0x9, 0x7, 0x400, 0x3e, 0x4, 0x69, 0xfffffffffffffff9, 0x1, 0xd30, 0x6, 0x3, 0x8, 0x200, 0xed, 0x3, 0x7, 0x0, 0x10000, 0xc000, 0x6, 0x8000, 0xfffffffffffffffa, 0x6, 0xba39, 0x5b, 0x7, 0xd, 0x400, 0x5, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0x100, 0x6, 0x0, 0xf, 0x2, 0x0, 0x368}, r2, 0x2, r3, 0x1) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xffff, 0x10000) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1000.456232][ T1715] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1000.492713][ T1713] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1000.605534][ T1724] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7a, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4(r1, &(0x7f00000006c0)=@isdn, &(0x7f0000000740)=0x80, 0x800) getsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x220200) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046345dd30"], 0xfdef) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000500)={@remote, 0x100000001, r6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000540)={0x20, 0x201, 0x0, 0x5, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000005c0)={r7, 0x80}, &(0x7f0000000600)=0x8) getpeername$tipc(r5, &(0x7f0000000640), &(0x7f0000000680)=0x10) 06:26:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1000.762121][ T1736] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1000.825678][ T1743] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1000.844407][ T1743] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$mouse(&(0x7f0000000600)='/dev/input/mouse#\x00', 0x1, 0x8000) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000640)=0x95, 0x1) r2 = add_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="f9d79dbdae03377359c56259f183a381bb97e8d99915c2647e9e8b3736df23918387eaca012af2b79ce072de3b5413a3e26d9ec2ede22d35ae3b9f4209dfa6ed20af6a289f33ae20639a3d4112ae71bfa1e9ec1747c0e020c7be3a44e1f6da9a6fd282abfc9d4a8ae929e1fb517acbda47450a9c1fdf97", 0x77, 0xffffffffffffffff) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="0f1f16c09705e3d61e002d4fa2a42d2f2d81bd1ff41492f3c401e0c0a2681877dd47bea7f6298018e787d8011c13cfcc598b7dc6de6f7278ff6dd72c3726e6f4d874ca7569cbd2e030831d47e38d300115b34175629c3db09db4c65a47c3098ec4f793b16c128bf3ca919615fd9ef5b515a469bb27f273c97fdcf9189982a30f4d14a5c9c5206237ea3049189d3eb9471663663b130dfccfa5f082b8d64797a2a1f9e9d67a843f941b9cb6cbd1c2cf216b5ccd0e866ba0c3b35a3dd1c2a36d6c9cfaf13d9d95cfb79b58ee4efe0a7e539ae2778e33c7f0f3c0206f", 0xdb, r2) r3 = socket$alg(0x26, 0x5, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x8, 0x3f, 0x6, 0x10001, 0x1f, 0xfffffffffffffbff, 0x860, {0x0, @in6={{0xa, 0x4e24, 0x100000001, @local, 0x9}}, 0x1, 0x7347, 0x4, 0x7, 0x3}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000500)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000005c0)=0x84) wait4(0x0, 0x0, 0x0, 0x0) 06:26:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="2600000022004701050022008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x1, 0x8002) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000002c0)={0x1, {0x0, 0x989680}, 0x2, 0x20}) open_by_handle_at(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x4001) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000200)=0x9, 0x4) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @loopback}, &(0x7f0000000040)=0xc) epoll_create1(0x80000) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x3f, 0xffffffffffffff99, 0x2, 0x100, 0x50004815, 0x2000012, r3}) setsockopt$sock_int(r2, 0x1, 0x2000000000000b, &(0x7f0000000380)=0x80000000, 0xfffffffffffffd40) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x80, 0x200) mq_notify(r4, &(0x7f0000000080)={0x20000000, 0x1c, 0x20002, @thr={0x0, 0x0}}) 06:26:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6087, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:31 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1003.233588][ T1754] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1003.255407][ T1755] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200, 0x0) write$P9_RLOCK(r1, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl(r0, 0x2, &(0x7f0000000080)) syz_emit_ethernet(0x300b00, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b4090000303a0002024300600000000000ffffe006000000020000000000000000000000000001820090780007040060b680fa0000000000000c00000000001a03ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 06:26:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1003.301428][ T1762] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x300, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) r2 = dup3(r1, r1, 0x80000) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) wait4(0x0, 0x0, 0x80000006, 0x0) 06:26:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00', 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r4, 0x0, 0x1, 0x0) [ 1003.486924][ T1781] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1003.514894][ T1785] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1003.646026][ T1795] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4204, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000084300000000000000000de15c5d084183fbf1e0000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfffffffffffffffd) 06:26:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6800, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x500, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x40000) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000080)={0x7, 0x8}) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x3ff, 0x7ff, 0x6, 0x1, 0x8, 0x80000001, 0x8, 0x9482, 0x1, 0x401}, 0xb) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1003.847018][ T1815] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1003.910721][ T1826] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1003.935629][ T1830] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1003.985103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.990887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.996772][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.002547][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.008427][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.014216][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:26:32 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x600, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x70}}, 0x0) gettid() setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100), 0x4) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1004.053136][ T1838] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4200, 0x0, 0x3f, 0x12) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7f) tkill(0x0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) bind$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 06:26:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7400, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1004.189586][ T1848] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1004.213425][ T1848] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1004.333932][ T1866] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1004.385048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.390835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.396684][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.402445][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:26:33 executing program 2: bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0008000}, 0xc) 06:26:33 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x1, @multicast1, 0x4e20, 0x0, 'wrr\x00', 0x36, 0xffffffff, 0x7}, {@loopback, 0x4e22, 0x10006, 0x5, 0xbdf, 0x4}}, 0x44) wait4(0x0, 0x0, 0x0, 0x0) 06:26:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x700, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7a00, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1004.627138][ T1874] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:33 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x4045, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', 0x1}, 0x18) [ 1004.762548][ T1884] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:33 executing program 5: clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x891e, 0x2100) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) sendmsg$xdp(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x2c, 0x4, r3, 0x3e}, 0x10, &(0x7f0000000680)=[{&(0x7f00000004c0)="b7cc8ef30d24665d985527781fb394164277ac3bf8da022a34685675a0779bda94d759398f581799c1dba52404aa3bece8706dc290bc39a741b3affaa82695ef6fa0a72c3c0b81f0c48797a4ed7a7394d84c781096e8422bf5573a963a00d5f7f49ec9f89d8462c6e8d0da85d331", 0x6e}, {&(0x7f0000000540)="5fcfcdefa175f490c3b5299be7ed451d68bd094b6f3bf05f9d0f642286f4ebd2e313780bc256b7c6629eca784eb5ac1660c93c803e3f", 0x36}, {&(0x7f0000000580)="f8b1702d02a60499c0e16806b24dd11f287d5134a71def10a3f64a7a1e6483601d45f7709b4ec83a83646dc8aef3233685302c911bd154c4701401a88f5ee94b2a960309d5e4a7f6545f101c9e3a4f2bfc2e28ba0fdc96af1773faf357e200f1592e706a83d88be4ec7e814cf51dd589e7e013c48e4d311bda3b8443ee8a256e5a21f0da1df5b026cfdef4e36ffe7c4972bbad0a8b82955b904a546e21d8481015777894c504f3520d86145a9168ef25895a4aea0e7a6866dbb1680037cb59d22baa9a2de5e2012014aa6c5b9d4e44a67f0da3b6db022acbac65aa08c3389aae692967cf34012e2a467de8", 0xeb}], 0x3, 0x0, 0x0, 0x40}, 0x8000) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000140)={[], 0x3, 0x8, 0x841, 0x0, 0x20, 0x100000, 0x107000, [], 0x4}) r4 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)=':@security-\x00', 0xfffffffffffffff8) keyctl$assume_authority(0x10, r4) wait4(0x0, 0x0, 0x0, 0x0) 06:26:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1004.806446][ T1891] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1004.935432][ T1898] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xa00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:33 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) rt_sigprocmask(0x0, &(0x7f0000000040)={0x6}, &(0x7f0000000080), 0x8) 06:26:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000000)={0x6a, &(0x7f0000000180)=""/106}) 06:26:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:33 executing program 5: clone(0x1000f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xe00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="28000000020000dc2fc0d5412babab00010000000000000000000000000000000000000000000008"], 0x28) 06:26:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xff7f, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xec0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1005.572249][ T1953] validate_nla: 1 callbacks suppressed [ 1005.572257][ T1953] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:34 executing program 5: r0 = getpid() ioprio_get$pid(0x3, r0) clone(0x4800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x161080, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000080)) write$apparmor_exec(r3, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2], @ANYRESOCT=r3, @ANYRES16=0x0], 0x3) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000380)={0x0, {{0xa, 0x4e20, 0x401, @rand_addr="786f844cfb96362bc5047eeb141918c3", 0x8}}}, 0x88) ptrace$setopts(0x4206, r1, 0xd0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0x210, 0xf0, 0x210, 0x0, 0x0, 0x300, 0x300, 0x300, 0x300, 0x300, 0x4, &(0x7f00000000c0), {[{{@ipv6={@mcast2, @rand_addr="7461212fdd6757c7658c98133f1c8f63", [0x0, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'bridge0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x3a, 0x9, 0x4, 0x2}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x32, 0x0, 0x1, 0x3, 0x5, 0x2000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) tkill(r1, 0x20) wait4(0x0, 0x0, 0x3, 0x0) rt_sigqueueinfo(r1, 0x1f, &(0x7f0000000200)={0xc, 0x7f, 0x5}) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000040)={0x100000001, 0x200, 0x80000000, 0x3ff, 0x10, 0x40}) 06:26:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x31c, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001540)=""/138, 0x8a}, {&(0x7f0000001400)=""/244, 0xf4}, {&(0x7f0000001700)=""/162, 0xa2}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/129, 0x81}], 0x5}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 06:26:34 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:34 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) tkill(r0, 0x1e) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x2, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x2, 0x1, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x2, 0x10001, 0x0, 0x8}, 0x14) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYPTR64], 0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000001600)=[{r0}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="82df6176ad4c0ca617ee6e949ba09d05c35348ec1e10a5ba5ac5b8a5fad114175ee3521798ac8f949b02530b2defbd518b7d0f8c73d3b01b451abeeed0ddffad9da1a92701f92e9ead7abd4a343b8176490d0a", 0x53}, {&(0x7f00000000c0)="66e7f08fb137c8836f7a9c477d54edbf2cb02e712162bfbee4afbc053a9dcd25afd8b03bf1452752c2463e41148f0bf33981fb091ee9a2698691e3bdb6fb5f744dc2919f0c20f92a74001a439a7b8912d83a638862092b6b180b092eaf51bf2d10866b8273214e66dd8575c71e1150b7a6d8f52102d5c895b99ac1558824a4ea25bbd1fcb4c380a28f40d9f8524858bfaf8cca4f44ac87b1cce42411e5a77891b114fae2542b8bb5079c43aea0c7249fd733818313617c122d7d46e6e82f379139691f9b97f93a692bd099714a92904b688aebbd904082a51c4f34488b1098a01edd8cf3a851adfb615779419790ceff70", 0xf1}, {&(0x7f00000001c0)="6bd37b56b1c9fd58aab9fe9383a37026dbfdc871950f61470dc888529c31", 0x1e}, {&(0x7f0000000200)="04afc6d3245385a7661072a628039515e10b82810582a70db69e4bfa2fe063f24d09b38a90e04d1bc8815b1e60a5664813379590f14a87dd4bb0545ca4a4fd08de35cbd3942fbabe16d5a89ce28839473f341c79bd7cbb70e9bb2f66403295ab8e55c831f06ed96396a0e91973d15904fa04d0c453cf97d7e2", 0x79}, {&(0x7f0000000280)="bfda416af4f44e41077549861cacdb9e2ac694070119224f77e5c4d913d13783e23191e4ebc69b90b215121abcee43af4d90130f55bd83", 0x37}, {&(0x7f00000002c0)="65a5f371582b1a329eca7c05b738aef8e008084f43f14887b76891a195c30cffe0bf5f374193ff82901e6b3c538b275d53b84456", 0x34}], 0x6) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 06:26:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4200, r0, 0x4, 0x10000000000000) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x2000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:36 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1008.322581][ T1995] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:37 executing program 2: r0 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000) sendmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0xffffff69, 0x0}, 0x53a}], 0x1, 0x0) getrandom(&(0x7f0000000c00)=""/126, 0x7e, 0x0) r1 = gettid() setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) kcmp(r1, r1, 0x0, 0xffffffffffffffff, r2) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0)}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000003c0)=ANY=[]) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='!-\x00', 0xffffffffffffffff) ioctl$EVIOCGID(r2, 0x80084502, 0x0) [ 1008.363175][ T1998] __nla_parse: 9 callbacks suppressed [ 1008.363184][ T1998] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c1, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1008.454263][ T2007] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:37 executing program 5: clone(0x400000024024004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = gettid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x44, 0x2}) sendto$inet(r0, 0x0, 0x13, 0x400200007fe, &(0x7f0000000040)={0x2, 0x10084e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='vegas\x00', 0x8) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000600)="52c22b096027318a741dc2b0facbdb63b17c4eb80cdaff55849f3d173c4d335635d161a5456fdcad0facd60258cb54aa9b07fd18cb36c2b7593e0e6a08167b23e6d2e1180f6f3282000059a594169841e2bdef65a5b3326e89d96a157def42a7648a62a81085933757eb81c95fe761641f684e5b4b1092e9d8ea771dcd2bbd8a4ade9614fc16e7624a1f95f712a64a2861c8ffcfbc98cb64f0426e7ae71ee48737f0e9568ee1d6bbaa2144f0cfd5fd1adde42d8f7d7d180000000000") 06:26:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1008.589818][ T2018] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c2, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1008.741609][ T2033] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1008.767566][ T2033] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1008.865233][ T2038] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:37 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020120}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12ac}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x822}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x44) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000100)={{0x3, @default}, [@remote, @remote, @default, @null, @default, @null, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) sendto(r1, &(0x7f0000000180)="5be49735c999f58313201f7d2a5c616a8ca78a7f1e4eded06ef889089ae97a6d71e5866ba8efbd4d4bebcaa8390f7cc502793cf57cac2fedd1448bb38f26c667c69730f2fd7e160a269ab8cc679e3afa68d24fe7eeaa14167dd1c8a722ef84113308fb82948fdeddcac4538c08ecfe738deea8afcaed65029f28091555ee3d81dc5799619c6d5c2d67d43c662a96509fcd7d1292e55fabf8f8596f74cc881fc6c18246b1f605e1efb9082093", 0xac, 0x20008000, &(0x7f0000000240)=@llc={0x1a, 0x11b, 0x7, 0x401, 0xb2b3, 0x1}, 0x80) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)={0xffffffff, 0x0, 0x4, 0x1100000, {}, {0x1, 0x1, 0x8, 0x100000000, 0x200, 0x53, "9ceee793"}, 0x8450, 0x7, @planes=&(0x7f0000000380)={0x4ff4, 0xe23, @mem_offset=0x59a, 0x2}, 0x4}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000002c0)={0x0, 0x7}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, 0x7, {0x7, 0x1c, 0x2, 0x100, 0x2, 0x7, 0xfffffffffffffc00, 0x100}}, 0x50) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) sendmsg$nl_netfilter(r4, &(0x7f0000001f00)={&(0x7f0000000640), 0xc, &(0x7f0000001ec0)={&(0x7f0000000840)={0x1664, 0x11, 0x0, 0x708, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x1}, [@nested={0x184, 0x92, [@generic, @generic="fab7f18820c17fe9a5765d6fd7e1d05d050f575d3f46d67ac86df926d57e8de50969fb81d066dd94d5ba390b85456a80c9fab014", @generic="fcd6ce1e4bdeba57e7f5b786c8443dc6aaa3b2a51c9c36", @generic="66d3f2a4bcf563c0f1a3d727c122229debffa0729359e15e1ce84261dcf396baf6954e03caaeb9a528365e3f69a8441fb47f80cd091479ec6350f26ab1e5270f13884ce1ee70e6b56c76c2d9901fed60a66f17efd4e158a35522d99761451120967b2034c304d6200c8bceba66d673933809ea924bb734e5983c17b6fe52263f4666d791df1e18c234a6a2df52141526ce7c1c59e43e178a3cdc4a6641f0b6eb0f4de21978724c807d01ad7ebe260d893d0363ec08210633d67915f8d1", @generic="27ce45c018fc7dbbe5516e8f098946c5d74fea206605fb3a1d20fad333efec72ab490dd2c8afcddcb942063c21335214a474e17f6acedc70eb414b8d2feca1b771ba3a5554998eaa662fa255c4728c509792faa8a15906fb7c3a79da8eac3d3f4e4e6ef4fecf2a9ffc30482676fdfe89", @typed={0x8, 0x38, @uid=r6}]}, @nested={0xf4, 0x4a, [@typed={0x8, 0x50, @u32=0x7}, @typed={0xd4, 0xe, @binary="4fbb9e8d1166e9f5f6e22c46562797637d71f8535ec0800b116af43de540baaf3acd5ad945c6f78e3dbb0b1a9d11bb49c66b81501b8a08c65d1e5f46278d8adaa5feeec0b44a4ebb0b93134b49e69aba05989f0b7502225d6f50f07440ac96b6c82f46cea73d45b1c4bf42b42f457d49c0c481984d664a22a2ba716682533da0879bf598275b32869abdbe0dd7b614f4be63e758a8fadafcd53d3e0508d607832522789ca8f4d2407e1c2273f4a20ff86774b6a73bd01ed5d292a4e4d807b58d91f7c6f939956410b2533e3a7977"}, @typed={0x14, 0xc, @ipv6=@loopback}]}, @typed={0x8, 0x28, @ipv4=@remote}, @nested={0x116c, 0xf, [@generic="5325b736dc4cd88b0cc5010a6e2ba417e4d1c54142a25ddfd34b281a0669456afe707794db520d9233f20a6fce8f9649914948a4810bdbaaa16e7cf72060b3a7194acf282d00485cb6cc6f965e613c76a81d8ed88b18cc3cbfcbcb333f6cd1f647f1b1199227ca9fdc", @generic="78ac87619d990c2cd8e6724d93017b8813241be28ce9cade55154bc39729f0dc497e917aacbe3a77b091e63080c394ef3bee682fd1fbc79424329b8b483aa8a1", @generic="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", @generic="98c94b0ee13d3a37424e98631ea087c6fe531a49f58936bfe96d5369ab6944c5b339f278614c58fedec54d167494e38d1103599f084a735d68b64bd635df71e8ab3522d715fd408e0c68c09ab930c02b6de31118243c8aaf48ae39029e56dd3b15a388009aa5a553adea6ce7f54fc7aa170e97145d0ecfc97ee36f743d4a82548768a26b38f827e37201668ab1126bc0116cb0544e5a6e016d51e1eed14cbeac980cbc19f0f7b3a83aafa5bb0533606983ea52176c27d962f53255cc47"]}, @typed={0x8, 0x26, @fd=r4}, @nested={0x25c, 0x64, [@generic="d9f265a11701a88330fc1d3afed3577a0e6b09b3cdc6ab86465095cb74e9afbd7ce7154817430cc35eb5c38421430d60dddf3be4bf1b37dec4d480f09dd84af06c3f85248b7b729ae3fb226675c8bee29635cacba5ea2645eff70aeca2f6cdd94222e79ab2c1ad39c6c78e583262aee522b09d6bd29f33580309838f9dc3d6526d2cb43f4d701f19d27b7b450d66279e5756", @typed={0x8, 0x84, @uid=r7}, @typed={0x8, 0x95, @str='%\x00'}, @typed={0x14, 0x2, @str='/dev/video35\x00'}, @generic="aee403732878369a7e6377b00f6dd6b2921915c1327e1f933c54584cc4e9fd91045f178ede0481c95c2097a6db2d661602c2f15372d1c266c25a4b6628601119af3d0792782a281abe16018d9d393d113fbe860ff0a05f20fed29e1d92f79c525ba768cee90bcb7f347f18211156a605db2043c372e1d3c98813865e559bf332f2189e5fca7381586a86b22fac494b1e0714f6f282cdc9d1bec6b5a79bb4c623326fa8ea857cab07dd0aa4c1368e571d5c6d1daf968f37fca412ebc1c9d50525ebd04a54c6136f73331b70047ccd4f94f1c00206e63d8350097f7c630d9b41c67b8dc84a14bc4133f0ca34aaefb4cb3e71440684e2e6a54c32", @generic="6eb141b0801c76a96e7847cb40af1c2001ae458f32b0825a50648dd9227ffe1d55621bc11e790e6589dd962e2b50b2661b8e67e101789d6110328ce96bc75890cebf9f677d8d7303be33e32f1716a9a6d429cd62fa9e0e545024c235d6d806f8414673ecb7fbc3ba7059234a72153ec6f7f4eccea827ee08680782da89e89a7df379cc94d4b59f974cc05975cc0feec98c612dcc2457bab66172f6b15587c0b00304c35a8a10c7"]}]}, 0x1664}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setxattr$trusted_overlay_upper(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)='trusted.overlay.upper\x00', &(0x7f0000001fc0)=ANY=[@ANYBLOB="00fb6b0500d02502899982e5cc3ab0e6cabc8ca8f10d837248136c1e5ada7584e963287b0cc2f507fb7f23660d9e9aeeee0eafd823153fa956b5f6276b4503aedc345bc41a8e921946bbf52986294d9de5cf53fb2a687c94f439349a7f5790920000000000000000000000"], 0x6b, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x728, 0x70bd26, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000004c0)={0x0, 0x10a000}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x2000000001, 0x2, 0x0}) 06:26:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c3, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:37 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x43c2, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:37 executing program 2: socket$inet(0x2b, 0x1, 0x400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x4, 0x7, 0x8, 0x2, 'syz1\x00', 0x9e}) [ 1009.263946][ T2053] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1009.283518][ T2054] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1009.342021][ T2061] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4800, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x117, 0x3, 0xfffffffffffffffb, 0x6}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1009.527623][ T2072] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:38 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = semget(0x1, 0x3, 0x401) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) semtimedop(r2, &(0x7f0000000000)=[{0x3, 0xf91, 0x800}, {0x3, 0x1ff, 0x1800}, {0x3, 0x4, 0x1000}], 0x3, &(0x7f0000000040)={0x0, 0x1c9c380}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000140)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c4, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:38 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fdatasync(r2) 06:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4c00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1009.638594][ T2082] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1009.744768][ T2090] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c5, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:38 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r1, 0x80000) pipe2(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r4, 0x101}, 0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000300)=0x401) preadv(r6, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0) r7 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000b40)="ab517d4037c28774a165469ee39ab88eace98913d657e109bdca11d3c3e3d05f74fd585c85dd701cb89d8caca8bd88fbea90c746bb2001997f8ff61dab45076f48592b82f0dee8e4aef5425b5784d133c9914ee0c1a9ca2b770d28ab30b5a332995fbb38cc3eb95d206ca3b7a3852a247fc484cb18ee551af532ea360714efea2a52c7ff489018a37c59fc2144ec882d52667dee42b330519ccf7872b26ce604988ba66ea7c8653abf2161fe647247748e4f4cc115e457b016e3b56f9c62339bbad10420fee7018dc823365e9efe2a07aaa68767792bd0bcea99fd10aab997e4880841b6ab33e47c7b164bae353063", 0xef, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r7, 0x7, 0x8000}, &(0x7f0000000c40)={'enc=', 'pkcs1', ' hash=', {'sha384-avx\x00'}}, &(0x7f0000000cc0)="7af1114f7b054c1d7751ab4c5d364382f2e8adeff8e970a727aacd67388d16ef9e1a7c6fd32f3346a9ee9eb792a2e7cca50560b849aaf9068225fd59ff558761171b533899bef651e3", &(0x7f0000000d40)=""/240) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xffff, @empty, 0x5}}, 0x8, 0x7fff}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000a40)=ANY=[@ANYRES32=r8, @ANYBLOB="ba000000de4138fdbb07d220fea7f3914eadf7b8cad3129f4159f464bcf65b0cbe46685b11e4bb4137bffc716bee7f278822d78901c535b7bf72f7d6bd3e5ee8d53938aeb98613709c4236c11e0b20de1fbffad6ed658b8f35bcbd96e2241ab82acb8200747581e6bd652c06c6fe3d9ba0a9392472a22a421c8e56e844552cc959639c5960e1c0976bde7781d9167f143246d3cfbe18af50327d9017d68669cb22c6ff98d23ca654b25c344ac10d5ccac9c7464d3e3e3279be4941f70075"], &(0x7f0000000140)=0xc2) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000e40)=@assoc_value={r4}, 0x8) [ 1009.820177][ T2096] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x5865, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1009.918406][ T2105] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1010.035080][ T2113] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:38 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x80) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0)) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 06:26:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c6, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1010.172343][ T2121] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:41 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) 06:26:41 executing program 5: clone(0x2102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4201, r0, 0xb34d, 0x100063) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x10, r1, 0x0) setsockopt(r1, 0xffdc, 0x2, &(0x7f0000000140)="c3140cfd69a6657644de2c91ceb7e049416ae70b40c0c22f71c5ff41789b55868e88ebf61c58a5774026c533995420a90b0ccbf341126299ce6abe865f589c0022a4b955794a43e680099287f9c954477ce366adab8e73ed38530da3f3fade74b73c5a1a38a00d3f9dbae803f410f503d8d9cf7e486c760b6657287964485e351cb4b1552896a47fe464a086774c1c0529ca986737f48e350434a98121f7380c03c1fdc96cbf2641730fe54e4af5fd5e9f9aa1331ac42b14b354388a86f28699df1733c4a7488a9b9106e3c4a9b59d41772eaea1058758481713c9243f2a2c14003bc13bb56cec80f1", 0xe9) gettid() 06:26:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000002c0)=0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8040, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x3) r3 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x244a, 0x0, 0x3, r3}]) 06:26:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6558, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:41 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6800, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1012.743974][ T2148] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001180)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1015, 0x3, 0x10001, "504e8ff5e9655d3ac45842afabad7b18", "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"}, 0x1015, 0x3) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000001140)={0x6, 0x1, 0x3, 0x400, 0x3, 0x7, 0xe}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000007fffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x8000) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x1}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000011c0)=""/199) 06:26:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6c00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c8, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xf1, 0x501800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x80000001, 0x8, [0xa28b, 0x3]}) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000d24624b90e9c6f9e2eb0b4daebeff6755c9f0858a9b1ac41bb090fbf10997b92ec708c23222cd7db71e2cc769ac5b0d63f4c0ab34a7d8d7b0706daaf816e4e"]) [ 1013.072275][ T2177] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1013.231255][ T2177] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$KDENABIO(r1, 0x4b36) 06:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7400, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:44 executing program 5: clone(0x12000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x10100) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000140)={0x5956, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e24, @local}}}, 0x108) tkill(r0, 0x2d) wait4(0x0, 0x0, 0x0, 0x0) 06:26:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18002000000000000000000000220000851000000000000095006b00000071baad11edac7f6c4dc77d29e0f8c88ecedfe6b88ac498b5905e556c0168017d9ad35ec0fd39a42a6e9384bdb10f55a6ad6fb7c20484c828fdf9621d036e515084ca475d857e39fa97335417b484f290a3505327685392f3999fc87051607d712dcad8d0675089671f4e07b9331d556b7650c1446bf90f89acc21556ebe39139f8006802765b1aae44e8f6f8dc63fc9c1598e5033dd7ef0cd7b300bfb5a53acb9b24a7dfd3200c081eaf1bafad57717a248600000000000000000000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x401, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) gettid() ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x4, 0x4, 0x100000000, 0x20, 0x2, 0x400}) 06:26:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150c9, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:44 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1015.579716][ T2202] __nla_parse: 7 callbacks suppressed [ 1015.579726][ T2202] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1015.604092][ T2204] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000000810000000000000000000000000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:44 executing program 5: clone(0x10200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1015.660547][ T2210] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ca, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7a00, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) dup2(r0, r0) [ 1015.832398][ T2228] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0, 0x40}, {r1, 0x4000}], 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000d008206110ed953e6db0000000000000000"], 0x21) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='vcan0\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1015.880457][ T2230] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x100000000, 0x4, 0x0, 0x9, 0xcf3}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0xffffffffffffffff}, &(0x7f0000000180)=0x8) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1015.974076][ T2239] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150cb, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x8100, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) accept$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@default, @null, @rose, @null, @netrom, @remote, @remote, @bcast]}, &(0x7f0000000000)=0x48) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000b09b780c46b5af8900000000000000007f0800000000000082bea66f"], 0x21) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000180)="fa9ae5c406556afd0c36d3affe470e0d3c0fe1f13aaa4dae4ca2e9cf00137b00060db46584c7b2965a7aff122b76294d92fd2f1bed520e38d1d83c414a17b9c7c9b8a7f6a751cab3715557393a7013e69064f6f4f50b40908e0da5892c65889e81955af3bbf45dcd4354da102b66babdeb4d3673586ae0d356d229a25f5f8ad7393a09c1450937c1f2e2ffababe69f70728a330e7a01e38745b9ff7ecc2717cc1319952ad1f707c7193a44b35a6b378a2a8190a1e801fe7807abddd925facf064fb8d5f0b6c4ff4bc9f97e71db48e8c6c6b574749b3e4adc449cff85abf379b08ccf56ad020cb5f147d140"}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1016.143605][ T2256] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1016.256953][ T2265] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:45 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000bb0000000000000000009f7a00000000090000000000"], 0x21) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1016.308965][ T2272] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:45 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) wait4(r0, &(0x7f0000000040), 0x80000003, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x1000002, 0x0) 06:26:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150cc, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc00e, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1016.425317][ T2275] IPVS: length: 4096 != 24 [ 1016.437399][ T2277] IPVS: length: 4096 != 24 06:26:45 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xf8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1016.511560][ T2286] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1016.524832][ T2288] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1016.613952][ T2295] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xd, 0x5, 0x1000}) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80, 0x13092eb85a740cec) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180)=0x4452c30f, 0x4) 06:26:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x8000, 0x6, 0x16}, &(0x7f0000000200)=0x10) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0xfffffffffffffff7, 0x80000001, 0x400}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x8000, @loopback, 0x400}}, [0xbdee, 0x1, 0x8, 0x3, 0x9e883fc, 0x100000001, 0x89d1, 0x7fffffff, 0x2, 0x0, 0x0, 0xa0, 0x0, 0x64, 0x7fff]}, &(0x7f0000000340)=0x100) wait4(0x0, 0x0, 0x0, 0x0) 06:26:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc243, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150cd, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1016.819213][ T2314] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r3 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000180)='*\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x900084, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d6c6f6f73652c616e616d653daa7070703170726f6375736572766d6e657431292b6d696d655f747970000000002c64656275673d3078303030303030303030303030303030352c63616368653d6d6d61702c6e6f657874656e642c6163636573733d", @ANYRESDEC=r4, @ANYBLOB=',access=any,version=9p2000.u,uname=/dev/kvm\x00,dont_hash,uid<', @ANYRESDEC=r5, @ANYBLOB=',\x00']) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0xfffffffffffffffe) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000440)=""/222) faccessat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, 0x0, &(0x7f0000000540)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) [ 1016.901862][ T2324] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ce, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = getuid() setfsuid(r2) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) prlimit64(r0, 0x2, &(0x7f0000000080)={0x10000, 0x7}, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x6ab, 0x45) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x7fff, 0x1, 0x7f, 0x19, 0x8}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x1b}, 0x7}}}, 0x84) [ 1016.969956][ T2324] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1017.090845][ T2336] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:46 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000380)={0x0, 0x10001, 0x4, 0x86, &(0x7f0000ffc000/0x1000)=nil, 0x2}) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000240), 0x4) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) close(r1) dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002000290f0000000000000000020000000000000000000000a6b2946ee45f8c53", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0201000210000000000006f6ffffff0008000000000000000006000000000000000000800000000000e0000001000000000000974500003500bb7a7a2d00000000000000ff000000000300060000000000020000043c48bde534797ba5550758d52a000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x86}}, 0x0) socket$key(0xf, 0x3, 0x2) 06:26:46 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x10800, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x200002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000240)={0x0, 0x2, 0x4, 'queue1\x00', 0x81}) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x48000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r3, r4, 0xd}, 0x10) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x1, 0x3, 0x0, 0x2c2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) 06:26:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:48 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) tee(r1, r2, 0x0, 0xf) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfffffffffffffffd) 06:26:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150cf, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x34000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x100, 0x20, 0x10000, 0xfff}) pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) 06:26:48 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x5, 0x0, [{}, {}, {}, {}, {}]}) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000100)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) 06:26:48 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x400300, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1019.669769][ T2391] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:48 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000100000000000000001000000000000000000000000000000000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0xcc, "504489eeb87ee21ef07a9c9b91f653a3d21f21e353e77d751ccd1a4a851e46b056ab895a1fc1e89ba687f81043eea128dbbc15c603f50ed014f3d6ea5c0548b0b57df26759f315826d779e4c8779d7b6e223a2e3ea79d40359bb8129fbd36767b8968d5a796a117a5da63582d956b26395d13bcbf045ee008e18aa6e0c70e56778f9f80ce4f991dff534796a5b72ebe20d13206079ed904c7b3d5167e3dda0aa4c81d626f989a28463971fb92d48e974ccb2b9c3e49fd61ac98551d0e1110d07216a8c44a882433cc61369c9"}, &(0x7f0000000000)=0xf0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/110, 0x6e, 0x1, 0x0, 0x0) 06:26:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101200, 0x0) connect$netrom(r2, &(0x7f0000000040)={{0x3, @null, 0x5}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 06:26:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf0ffff, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1020.169940][ T2425] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x1000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d1, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getgid() getgroups(0x3, &(0x7f0000000080)=[0xee01, 0xee00, 0xffffffffffffffff]) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) r6 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x40, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000600)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000740)=""/17, 0x11}, {&(0x7f0000000780)=""/43, 0x2b}, {&(0x7f00000007c0)=""/2, 0x2}], 0x4, &(0x7f0000000840)=""/182, 0xb6}, 0x1) sendmsg$xdp(r6, &(0x7f0000000fc0)={&(0x7f0000000940)={0x2c, 0x2, r7, 0x1c}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000980)="c3295bbcb79a291f737352d2304104998655814f0a8246a693175c552456715072231dcef8c2327d5d1187197303b817d2619fd7985232d2985d3cc5f01ac9acb206dd9d172574c0b23c470017713b631982cf95374fb7f15db906eebac1aea195e36d69ab45bc68e2a19a7043058e99d5bd53dfcb1cb01331e2862bc67b1af77920138d7aed57a5dba85c37f653dd6d7d17e45e7921e380bff98895a1f12115b5769dcbbbe68c2f3ce044803525ab0d6396c6", 0xb3}, {&(0x7f0000000a40)="629713cb503bd66cfcf8756fa89feba36f87838d20f238a3c938a9d9aae4138c8cae769fa611cc3919b33e7efa49cb5caa023f623326487dcb1704d7a755ad32acebc12f34c2a99def2edb429229771563843c23f9af3499d9deb2c05f1ffd1041b9ae7288684bdca801b46c5898d9d17a3b052a261b49cdf5717dc25d56eb0689da967270d2994fdb7673c376501dc11445b85c3e82ce6b18cb792ed49891a1199b01fa21", 0xa5}, {&(0x7f0000000b00)="786fa19cac87", 0x6}, {&(0x7f0000000b40)="b9f423548faf01ce996dad62a852416c4d873ec34984ab00ec3bec5dd2d068d4ad923e639843f07e043335f1c47efd2ca501c708a9e94a1f6f97e8d7567e51e3ca9ae6f3eca8a7eb8241737a9b1c7dec6bc93df1d448bfa82d59c72aef3260cf6a97b74d4de0a0539667036a1adedd9a4bdb1fd1fca87eaf75c4ca006f1c95b5e430caa453fc25dd7905414a8a58eedf01981fcbd50146f2c9fed1193c2f673259c5b35c377289eb6d7b9612a2530eeb6d17dd226f61e0514835105b6725f33ff37213ec729a13108dab7a675a493716f8443d88550ecb596c024a57e835fc1e0a05", 0xe2}, {&(0x7f0000000c40)="40ae739175c70767812dca19c40488306ff61edbf5d4ea8b32bac08d0e53cc51e1509ffec422ebb60922f575d0517979e6205140bc8a7c5a6b84beca5e0f58364c3cc2d34edbc4f525023a6c0bcf0354b20c9c300b10d309eaf3bedee248c7201a24ae38f1677d0ea536434184a0d4adad5649", 0x73}, {&(0x7f0000000cc0)="dc26e1d8e6ce0d64ae35dad7587deaaca7f50be273014d1ee314c9fa97cdb77a90e407358376f43756c74f86eb2c8ca9297990001675ddb85f46441e3b92f0a30c0671e51d1ce2dda000faad53565fc5c9fbe292fe462515ef33a36e8261dd2435fd45c2956efb37cf5b132a19fa21e0f56ef4b1a1b5931824b9acb4c64f0ba6c333b6f339555b7763d1d3d9e35e43a9a0051be2e8e0393aa28e112fdc4ed407f17f7ce5b1073dbeb3bdc949d4d0", 0xae}, {&(0x7f0000000d80)="e89c74746f0097bc172e8951546b1cbbc588835dfba0f66dc246db92cf021ae06761f45f553ccfe1f28528b23696c52ce1b73948f3c94951d2bfcad8165fdfa964aa048ebfd803e8132792944fd59eee585e88ef3865d92f83af7befb62fc9572f674d266d0dd0ad32e1dac39469487e775edf90063fb0b6260547ffcb02a83f0fe233db843dfde140126ff583156400a7cb73cbb05bd1a507ee30a17c056b3f29845d51e759d3b1e9c0a2dbac1e8ab4fb5cb2fc96fe7363cfd3f604ea64473e13dbe00e708ecc3378d9c3a0dec5214f1103a996d27f376b21de892dcc9156301b2296f5d275274c6518c5a3e2305de6cf6c4d3b", 0xf4}, {&(0x7f0000000e80)="711518fc9d58e4e6aa448d6853c8e45f2d159d1b910ae1f6bc19dcdb68e682ec09562a3f17fdcfd27604fd9e7ca238294c7b8ea047941a5a0316637fff6435214321a0f9ba28fd9e2cad0e81530df75279c1c8dda5ceeb496adc1f6b919d13a555ca63c7915872c054f77b53fdc089de5215a300bcac41ab23c2b32618857c6506f96ea4ad12702e3ea37a984c9bd543046833a2780a", 0x96}], 0x8, 0x0, 0x0, 0x10}, 0x1) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() setgroups(0x8, &(0x7f00000004c0)=[r1, r2, r3, r4, r5, r8, r9, r10]) r11 = socket$alg(0x26, 0x5, 0x0) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x75}, &(0x7f0000000180)=0x1d5) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r12, 0x84, 0x19, &(0x7f0000000140)={r13, 0x3ff}, 0x8) lsetxattr$security_smack_transmute(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x3) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0xfffffffffffffffd, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x2000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:49 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x28}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r3, &(0x7f0000000300), 0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x200, 0xbfc4, 0x8, 0x2, r3, 0x7f}, 0x2c) 06:26:49 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1020.460763][ T2442] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(r0, 0x0, 0x0, 0x0) 06:26:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d2, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1020.751326][ T2479] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:51 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:51 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$notify(r0, 0x402, 0x8c9ae74e859fa687) r1 = socket$kcm(0x10, 0x800000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) 06:26:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x3000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$cont(0x39, r0, 0x2d4c1153, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:51 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d3, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1022.972247][ T2494] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1023.008757][ T2493] __nla_parse: 12 callbacks suppressed 06:26:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d4, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1023.008765][ T2493] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1023.030487][ T2495] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1023.051180][ T2506] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1023.071235][ T2495] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 06:26:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x40) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/179) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='gretap0\x00') [ 1023.156044][ T2519] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:51 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) 06:26:52 executing program 2: [ 1023.299408][ T2530] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x5000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1023.445250][ T2543] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1023.481746][ T2547] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:54 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) 06:26:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d5, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:54 executing program 2: 06:26:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:54 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:54 executing program 2: [ 1026.009582][ T2556] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1026.045458][ T2555] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d6, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:54 executing program 2: [ 1026.086902][ T2564] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1026.171108][ T2568] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:54 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0xffffffffffffff72) ptrace$setopts(0x4206, r1, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x800) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:54 executing program 2: 06:26:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1026.313062][ T2574] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1026.360117][ T2576] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1026.418432][ T2581] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:57 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000009149e47c6fe7c87d46317eabeb000000000000000000000000000000000000000000000000000000"], 0x21) sendto$inet(r2, &(0x7f0000000180)="9889a8a1a6a7e42c92170fa4fae5eaddb1753f8d630fe929f28475a62456799dc48e25b58f081d71e93a31a9f4107f8175c4cce6d893df76203f2086eff9e47f5f1df3b2e841c5b47b7c1444ae91245f5f5341263c22175edd93d9d795e2a510f35e886c8d0c3120866616d61a2d74ac4e255e19192f903ca8b831124947cff311629d9e3c95810242c274fe57805fe89e1160fc052912016e6654562914b0ffebe6bade3a33a26bfce54af777a4571128e643da29baa4434bfa590cdd4280a9650f552705e05f47b4b5f958bd0ffa9eaa72ac5682eceef802f315e0", 0xdc, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:57 executing program 2: 06:26:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4002, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x7) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:26:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x8000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d8, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:57 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac141400000000e300000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ca600000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000ba00000000000000000000000000"], 0x1}}, 0x0) [ 1029.057167][ T2594] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1029.123674][ T2604] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x200000000000000, [0x1b, 0x0, 0x1b], [0xc2]}) 06:26:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150d9, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1029.178710][ T2604] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x2, 0xfffffffffffffe0c) tkill(r0, 0x1d) r2 = dup(r1) sendto$inet(r2, &(0x7f0000000040)="81b42dce4deee1d18210f96e28d8392ef83aea6684ad890ed73ddea06ed6f2fa6b088d74c936c664", 0x28, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x5) 06:26:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xa000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:58 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:26:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 1029.397464][ T2633] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:26:58 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1c7) write$binfmt_elf64(r0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0xcad) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2003fffe}, 0x0) [ 1029.470963][ T2644] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1029.502427][ T2644] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150da, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x20) r1 = dup(r0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00', 0x200}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/201) wait4(0x0, 0x0, 0x0, 0x0) 06:26:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1029.642815][ T2654] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1029.746666][ T2666] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1029.844575][ T2678] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:58 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:26:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x37) ptrace$setopts(0x4202, r0, 0x0, 0x400000000000) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4, 0x2}, &(0x7f0000000180)=0x8) 06:26:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150db, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:26:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xe000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:26:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0x4, 0x7fffffff}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) sendto$x25(r1, &(0x7f0000000140)="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", 0x1000, 0x800, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x10) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000001140)={0x6, {0x3, 0xfffffffffffffff8, 0xac59, 0x3}}) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x100000004200, r0, 0xfffffffffffffffc, 0x2000004) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000011c0)) rt_sigprocmask(0x3, &(0x7f0000001180)={0x5}, 0x0, 0x8) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1029.998105][ T2687] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1030.122930][ T2696] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:26:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x84000) renameat(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000340)={0x0, [0x3, 0x3, 0x101, 0x4, 0x7, 0x793ac462, 0x8, 0xfffffffffffffffd, 0x6, 0x8000, 0xa5e6, 0x1, 0x1, 0x6, 0x8, 0x2, 0x80000001, 0x2, 0x6, 0x60, 0x40, 0x0, 0x3, 0x7d, 0x2, 0x7, 0x7fffffff, 0x47f7, 0x2, 0x8, 0x6, 0x1, 0x6, 0x7, 0x180, 0x4, 0xffff, 0x7, 0x2, 0xffffffffffff4685, 0x6, 0xa4, 0x40, 0x7, 0x1ff, 0xa400000000, 0x8, 0x4], 0x1}) mq_unlink(&(0x7f0000000300)='vmnet0-&userlo\x00') tkill(r0, 0x21) wait4(0x0, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_buf(r2, 0x0, 0x2c, &(0x7f0000000240)=""/102, &(0x7f00000002c0)=0x66) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000080)={&(0x7f0000000000)="f2c2a1ebdc5752e1323c7dfd52b4f7e38a686576b0309ebca0a091e5f1e84324e62b891f0ebd7dfbe5547d991184cc471100368a78e74f332bdc4eb2a559aedb9bf13681d5e1e595097879eaee6a0bc0447a93bbae5f34740ba25e9e8f45ae85d4d76575035e80532aeffac579c4a32b340c19867b780266da", 0x79}) 06:27:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7, 0x9, 0xffff, 0x0, 0x101}, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="a1ce19c0b09609dbc60de809286e0046ce6ffd07c80738000000000008000000000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150dc, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1000000002) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1f", 0x1}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) 06:27:01 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1032.438453][ T2723] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1032.450803][ T2725] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:01 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff84, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 06:27:01 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150dd, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1032.529420][ T2733] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:01 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) poll(&(0x7f0000000080)=[{r0, 0x6246}, {r0, 0x8}, {r0}, {r0, 0x2000}, {r0, 0x4}, {r0, 0x10}], 0x6, 0xb72) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1aad020901034b"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x11) 06:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x10000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1032.679834][ T2745] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1032.754568][ T2753] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) wait4(0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="7cfe6469421a6e779514ae72aada97afb9891d26", 0x14, 0xfffffffffffffffb) keyctl$revoke(0x3, r2) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x32400) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000180)) 06:27:01 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150de, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x20000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:02 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x3f000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1033.290608][ T2764] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1033.357088][ T2764] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x3, 0xfffffffffffffffe, 0x9, 0x8, 0x9c5, 0xfd4, 0x4, 0x7a, 0x7, 0x0, 0x9, 0x0, 0x401}, {0xf95, 0x7, 0xfffffffffffffffe, 0x401, 0x3, 0xe00b, 0xffff, 0x4, 0x7, 0x1000, 0x9, 0x0, 0x7}, {0x6, 0x7, 0xffffffff, 0x8, 0x100000000, 0x5, 0x5, 0x8, 0xffffffffffffffc0, 0xfffffffffffffffa, 0x1, 0x6, 0x3}], 0x3f}) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x14f164ffe7b8946e) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)=0x4, 0x3c8) 06:27:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150df, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1033.497257][ T2788] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:04 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) r3 = accept(r1, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80) r4 = getpgid(0x0) r5 = getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) r7 = getuid() r8 = getgid() sendmsg$netlink(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)={0xe8, 0x3c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@typed={0x4, 0x27}, @nested={0xcc, 0x53, [@generic="918f5bffe09ecdee7fbda4fdfcaef14f8321d9bfa344e78ad0c3dd0ee0dcb0b77acec00e30967a452fdcf3ba091c8a0f39dc29143e386837ba16f3f4d33394bcb8c8aace142029eb397e1a0fd18ad7e4dc96d69e211644df03b4e4c2e838b0a707470933b6dfcb3a957772d5e51fa094941f0c7d32a94574ed34ae063c61f25b957929525ca6ff7aede5af4e61677d9f01d125238bb98f832585e796c4a1b117a1ed76532a9ae0b92f470e23622ef6a43667068c577df5c7993a9dc8d0f3bbaf80a373ada1da56cb"]}, @typed={0x8, 0x9, @u32=0x8000}]}, 0xe8}, {&(0x7f0000000480)={0x93c, 0x2e, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@generic="138ad4d8db2b30b3726bfb4356d4237b1a826f634cf2a9755a5f4de1abbfeb3b8957fe01c90573f00d108eeebfb75bc2e6075c8927443cf77fed10b37ff7d2109ffcce9c58f1a4baf40344ed730fcb803b1eb32f31bb4a05fb1ad796", @typed={0x8, 0x2e, @pid=r4}, @nested={0x4cc, 0x6c, [@generic="fe8a33f82bb8d3e11ae6b73d3782bec3961219403d71c4955ccbe0d1d9ed572970af49eec2cccd8a458f04ccecd1afe8eebb06be465da6b8a00e2ecceb7f9ed5da59d7eb6a13812e1c72882a46f16438340855042e0052982cbafa8fd3", @generic="a754545f1ffb4106197b6cdb15bc88a9702ec8998e54b3258d4d0b91c76d2a0c0be6ac7bfed5673a85adf711bdc7f7c2914ee3857eae06a11b270e5a5d3d3d8066d286c53f1574ecdff4e84918f611ec64915248f5e2438a8dbb48cf1b3ad2d6c15e3717cc0916ca5fa02933a8500466e9a97d2dc90ba0421827fb70b02ccccb0ce0cda3e7dac7507864fac784f4c4ac67f2e063eddf4e9a409c15bd49a9861d4ee5a21b7bcd609c0115d0a5bb1249242bbe98648ea6fe02bd0ea1c159c191f79fc0275878a6a87eac4fbfb3046daa0ff11b7e5e0fecb706085f9ed657c3b68b7ec45928d58b3daa6d85d116049c", @typed={0x8, 0x3b, @u32}, @generic="f858408587ad73743fcddbc037f1c5bfa167d0a7b1061e752eebc9c9ce42925b8a7a955253521dd7d8ab75e4cf327884ccf9823ad615de8e978194d1593fb36b2d2a97db3b0274759fdbb8efdf4e19ecbe24da7f289f96e1784a600505164c43ad520e216ff23fa983ad155947f9e1774984359462f4bb658b3df5dc8b8267eaaf1be4b6d941", @generic="1d4358aee31c270f22e00449bd694a2a9d6a0d7021e442a55726de1cec45dd5063461006cb5a3774dd054064018229e9c44652c824a823fca42291a9038b759a5baeb25bb65c057f6aae8ba8939759d8b0679ac5af1f4541f1746a8fbe2a70b01ecafa560ef1f0c16df6fb40fea2ca756c326433a8aff925", @generic="b8479e1767fe5dcc7ff008aa1c0b7180c3f97208d10aadac9a2548ee3051b1bf6a7dd3a8bbbdf096b5a0f17a4945815499b0f9d678e7d941d04fd14e5e25d16da5ea960caa0a0abf174ba3eca0367f9c093b550ca25ad547c2435a07931379399e23e09cfbf4b63b1bc29ef5b3db1aa7afc3a66537d1b8a620b423ee833031b093385cf5eb39340699527a297bfdfe69358847f5fa9f2c9db6eb219c8de2a8a5435e31552a1f86b4266632d1a637a96ed3fe30d06b0bab162c409d30f8d3151d0d6d184d898aee7afb18280f0ca522505bb5a4ce8dc2561f628782", @generic="385173825ae7d23daa2e1eba73ccac34d2d8586f0dc4b14d33874300950f3ea60f11760d5e3fcc8a3cd71f45f2d424e4c9b56a5e45a0d4759f1e254082ff49dc32c9f96aa2f0b421ca61b108cf58e04bcf0fcf5735dab11a5cc7ed78567df9", @generic="2a24eda344fdb8f0466c76776b42b26038db37adb239527809fed19b44e1bb07497caf94da7d1b0d398803fc6f64ba2a3fbd990e88c5bd857ead1d2970492e6efacd9b7e10acb588d99939efe8056a07c671c7f4777f0a8d454dbea85313d83a6ca9fde7d1b38f0ceccfd7dfc06761d044da3faaa08a248cca72a9e023b458186113a7b37e8065f30f0db8e7b52d687712c8d3a38a7e677afd6202d72af05cfc92b0941cecd01a0402", @generic="4af264810fddcc85853d4a1a5002fc1923d312eec49d4c5d28f75d39539d370aec44e77313f937480312dd04fbc768ef78477572b9f5d3dffb8328fad48246016af868da5c90c47aa11cbb9010d14d114955b55fcef9c7e5f87c15b3d5de6817ebf00adfa7ccef62107761eb98f6659ca7bc1e6aa7d6f29fac1005d16811a9eea6b6627f00bb85819f872ab6328177334e20"]}, @generic="126554cc785b72256f28676ef29ec71ef4a41465e9ee86d7abe89815ba7310f15d7e71fe823f22d9e9395fded3afe275c1b69f42a7fb524f46d76bf239a100f425763b9e57c6404e69685dbc3e5c08dc0778df84372785a833fc3c17e6defbb06fbebfddbe8501cd778b7ed5295a9184daa58fbb186ed0f0241b3d74f398a7e04033f6a50bf1708182d3a251cd41e5ecf56db869d40d897af0ce30dd0162f5e12b47c0d3f28cd81d", @nested={0x278, 0x12, [@typed={0x8, 0x75, @fd=r0}, @generic="96b74c4ad94b849dfa451b2d0ecedbbe78322b0458b36aeda7befb0281ed060bbbed4d4e81308bca8a80707288c9ec77c7154b2f2b12eb11f2cbd9805beaa2ac3aa26ae8dcbe02da587f1d30f37cddec176f283f48eb7bed22760e9bc8eb0c98e8121ed935f24e2254dac71aabeb290a31ab50fa4821ab85", @generic="dbf95f2556901d5eb434da534246cfad64e0bd8d33ff005bdc44ee6c92d9a7eaac56d57886888b3abf011fe123e44282eea46d7763363ee84ccb4e8b1fdf91ae64c63a82c177424b255ba0c703dba5d6c4dd8220ebd381ca97bbe32a63f757a9e6a3f894a8eb39cec71d9733d7845e467974beb5cfd13f3a6d893b1ffc0265f1972a81bc79b031bc56a50932eaf64ac52459b9293dfdd302669a", @generic="c1cd5709f2ab1b39e76f906557f6eb74daeca66e157b244f0fcecb514a49997a42d1f6e32b7e9ccc734a3d4604ae58ec7beb34b3dcecae1d4d565dfbf9ad0c1323ad347dfeed43c3e49484db15275493d81381ed4395db6fa85f7409722b58eaca10f832c182ddc9b741b022635aca992c35a219dcb5e4a6f6174714e7b651879066f3d20cf323e200775bce01b416d401cb45b1cb4b798dec727ac096ac", @typed={0xbc, 0x18, @binary="7e0b25b488ebfeb34090d988f122041e3d9d74a17733f61546d7b802f85b8a2a470ae5254c871f36b3b2c3ab71732d2260546f50936fef6a3c412ae47c74ad90c43b3a01c69ed12cbf821b04264b35c9a08c46ca256f5fe9e26d059aec20e208c473e81dafebef8e0f3df6e719d4a2bb7d19e047c41c52dc4e9b5041c2e422015aa46f6f200e0fdd6ac70a8942fd6dc5edc8c85b5ab14e1e351010936544d499a137467e4a07593fda434cd9acbbf61098dd8f7f15fc52d3"}]}, @generic="4aa0965df5aef53afef5e36b3a8381fbaef9a5de0271dc354e6bbd6505b5fe047e611f49600024d2e990a906ae97e64eeadf3b5128b7a4ba7ca1394a0f670e9dd8e3629f0a4cafb3e5ce5b5500b9617e090c1d94b2b3c62dd039072b988f3aeffede813f62d27178c8e4bd02a37927954636f85be5068cf851b7252f0ae30a873b31f9ff68e26173517478b17259e0afa148b3b395dd8f8ac621a62f809086bd9dc69e8e81eefb2d0ecd001536adc0f02585bfa1aca080571281a6429974b2368b90050d71829ab1131f497a9856c359051094235d6fe4df8e6b"]}, 0x93c}, {&(0x7f0000000dc0)={0x1384, 0x5, 0x104, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xc8, 0x81, [@typed={0x14, 0x7d, @ipv6=@remote}, @generic="642947f83ed47838b4621eafff987a6def1c48758a8e3be7a899b992ebb29caf76a75cf9d1defdb3573b2c95d492adc4cfd604cccc0e107a4cccfdaba378478bc21314bfda0cd0986c4d327be35bd2c35f45d51620f86a653cceb26befd4a5d4998776b928c94f7524f676861ab828366fb7b407400e25b8f174bbae5501c91d6c7929790d7acbad17670439e29b8baa6b31a1024313b11f5a7010690eaebfcabccb1e639da441c4165b0d66c2e980"]}, @nested={0x1184, 0x7e, [@generic="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", @generic="fa2b2eb35a5920aa9c396f235e544f4511ba1ba3de659f0c0941eb8021bd44487b50d51804519e6fe4cf4b9fd089f09efab11b0c221a15cd417d0496b990cf61cb1fc731eab37cf3b73981a9a4c931986a8e1a39516568bfc597d03408f297e0da35b8cf930a05cbf6f5269e3c0230e38305fa3a863ce4c2bece4a7809695c1b21fe48", @generic="8e279be06484914fbd885129b8d55104dc5c4024e3472c9083d19a64430230a772d0b8827fbfa46fc06887790a885ff8a29b020a01144d5a6accafc6b858d1c0c0ac2912cb0161aa43c9ca99080fc6e0b0cae8a6ee5ed945f7fec9255a9ddcf8d34f016d70999ceda99d1bec0fcac94176e9dec004ad750bb4cc6ea16516a3402b7916c056c14e7f81521c838aa3d6a327bbf9ffb7a252758cd9261e2490c7ecffaccdaa844faea89fb17ffb6c5fa5125124582b5b5d5cb24b7fe7d63196ae647f16a56f7dbdacd9226d429fe1c1183060e40e5d016920a37fdb66c7d4bc3168e580084c4dcc276ba903b438b04cb355a8840a", @typed={0x8, 0x77, @fd=r0}]}, @nested={0x118, 0x45, [@generic="30e7413b16df55061604857393a70aea0181ae09709505ca587be5cbbef332565c12801038e84567d2488eb9eda4ab92c79dc6082575a91d3bf2dcc666d06669911d68d149127c0c4c218100b5f328f38f7fa3d25d4c3a72a22ea80eec166317f2dec0876d7e4b7699cbfed553f507352c7ac1cd40c9f241eb63e3473e9250cfc9815b03b079c0365cd0a3db29fc99dfb6ff16e75eb32002d8859da1d05943da0c4db1829427fcc1b919a83a4a4521", @generic="3e6b64c0bd1c2bfdd47f1295b96042d3657e8e6d0c01e65385845ce15c1c9970533b1a38dafc1d7e815fbd70e99195816bb322d074eec2f4cd6f896bb325548950b49d51c58c5355a32b509177c46c417358c68d525bcfb65a785d560d17cef8192cee"]}, @generic="3f98ae293cc54074781bbbff6f"]}, 0x1384}, {&(0x7f0000000280)={0x1c, 0x37, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="3868eb856ae630c2ec"]}, 0x1c}, {&(0x7f0000002180)={0x278, 0x22, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x268, 0x7a, [@generic="f8198b", @generic="5e8faf370221c6e365f44cec7831a2a95e009582", @generic="7126ea4928d105856cc56378be0eddc80e7e09a9c7e377e6c8580c0067eb8e7a6777fe2f2ab24427f3e23ceb122e07addaa99cdd2faa4a8ac6612701a8e909beb9e722c23c15d304dd33799f24142adf42f4d3fcd520d3d549490fb0b912339f217c429947437c17291d3220c0e9f6c7ee761db7afb3ffde9b115f9a9dd721bc46a4f7cb4c7407517fc450b6afb9315d4f77e16b4001ceccbca0a63c4cd7ec68555a5d17b0f6d659665a88443c619569c4c2bd3fb7be87a485d8ad94ce6e4fd25e5cea2c", @typed={0xe4, 0x68, @binary="511c712539ba5a5d7dfbca51c58bdc0401f67c5034c8d0c64410fc4619d97347214c87d27846f0a6262c764028966f00a0e729b3df020813ef1dfe53243f407d730bca2887f8ae6055e31c916b290280203751d6d08d4ae04aeac0ee590cc5de11c92dff063a2f290fb7ace06fd19f1c9500c077e9dcdb952aa95cab99837fef43f365183ed09dbcea78b60c72deff45cd599976f12c1823565d623ca65b9ce3365b41818dc1392721965e2c4db7850ba11a8c2fc59497fb5332001c668fc9488a4b50d1d0e9ae9b5ec00aead46a384c9560ec9fbe3fb64e3528a7fffabc"}, @typed={0x8, 0x44, @pid=r5}, @generic="501613e3e30f181c4944ee072635dc24b92ba18724af48a0933f1587d603122b281de9ca9a62fffacfd598b6cac0", @typed={0xc, 0x5d, @u64=0x7}, @generic="8db0a31933528e96ce1e3ee803c38432cfd7ec26510fe3a1ee8f7bc9857819fc79586924b2dd79f973287c9d381168a5d17d17a6ad26754076495c80cbb21c395bc9d72a54d0441a98bed846b9cea6523693688178f219", @typed={0xc, 0x95, @u64=0x71abbe66}]}]}, 0x278}, {&(0x7f00000002c0)={0x18, 0x2c, 0x525, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x8, @fd=r0}]}, 0x18}], 0x6, &(0x7f0000002400)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r2, r0, r0, r0, r1]}], 0x48, 0x4000045}, 0x50) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x48000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) tkill(r0, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) wait4(0x0, 0x0, 0x0, 0x0) 06:27:04 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0xd4a1f3de5dcdb3b5, 0x70, 0x1, 0x0, 0xfff, 0x7, 0x0, 0x7, 0x2a, 0x1, 0x1f, 0x3, 0x7fffffff, 0x7, 0x800, 0x8c8, 0x8, 0x0, 0x200, 0x8, 0xea7, 0x10001, 0x7, 0x3f, 0x1, 0x7fff, 0x4, 0x7, 0x1ff, 0x524, 0x6, 0x7, 0x1c0000, 0x3f, 0x100000001, 0x200, 0x5, 0x1, 0x0, 0xf04, 0x0, @perf_config_ext={0x9, 0x4}, 0x20008, 0x3, 0xffff, 0x0, 0xffff, 0x800, 0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x10000, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ff9000/0x4000)=nil) 06:27:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:04 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1035.667631][ T2803] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1035.707164][ T2804] __nla_parse: 5 callbacks suppressed [ 1035.707173][ T2804] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e1, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:04 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x0, 0x0, 0x0, @empty=0x14}}}}}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x80, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x7d) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x141, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x6d, 0x21ba}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000180)=0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) 06:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4c000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) umount2(&(0x7f0000000000)='./file0\x00', 0x8) wait4(0x0, 0x0, 0x0, 0x0) [ 1035.749677][ T2818] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x52f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002600812de45ae087185082cf0124b0eba06ec400002300000900080000000000000872183b0000000000", 0x2e}], 0x1}, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='proc!-\\ppp0\x00', 0xc, 0x2) [ 1035.864485][ T2832] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1035.933925][ T2841] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1035.945320][ T2841] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e2, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1036.008632][ T2849] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1036.088430][ T2855] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1036.099496][ T2856] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1036.137116][ T2856] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:07 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, r0, 0x1}) 06:27:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000080)="8308ee77f36da3b3f119c6aa744bdc0f166953222f937c1b5c343e1cd4782ba34856dc1391a332b61d38a97ec8eedc7b130df9e38ddaba7c1f7031") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1d) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 06:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x60000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:07 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='mem\x00\x00\x00\x00\x00\x00\x00\x009\x7fd', 0x26e1, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)="e72d00256334b95bcf0dd2fdbeff5064bdbb682fc6d234401ef6f8373ce837191f86b2847f67d272ee515516ed3b7e950910adb0be6bbfedf13accc189aab71703be9d6be2285197f314bfac3f13f4dfe175d79ccb059131d13273c506ae7249f2c9b970307cd5d849eaa5f357f7e4160f3ad34ec86cae200e50c1d3c5c986ff36de1b199436a80713f733d3080abb86be9143d95a3c403f1330bc47", 0x9c}, {&(0x7f0000000380)="1519d80bb1056e08526a45fbf1c87c45f0caf4ccf622e561fa7ec53372000c777e36", 0x22}, {&(0x7f00000003c0)="a145ddaaa639ec40417b416d1c31365fa618e4f27d665afe1bbcb220b4bf7afd7eeed7fac40a240bc2e97f9d6189829f1f0bbe615ef400da7918cebf99fb4001cf172ab72c972512551869755442e81f40ca30a8423cbd0e5e5e1d3c3375d1930d0d55c1501d5a4403ee31c563fae43253fde4d31e72d81fde5a6f4b82b42aa6cd37898b86ede16175542c31d7a08c693e220d7afb0c6d5223822a6d06", 0x9d}], 0x3, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000640)=0xfffffffffffffe4c) setxattr$security_ima(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.ima\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf, 0x1) name_to_handle_at(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={0x9, 0x81, "cf"}, &(0x7f0000000580), 0x1400) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000100)=0x68) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x7) 06:27:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e3, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:07 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1038.746328][ T2869] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:07 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x35, 0x835, 0x0, 0x0, {0x2, 0x1000000}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1038.796443][ T2874] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e4, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1038.839886][ T2882] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x65580000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:07 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x19) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) [ 1038.942095][ T2894] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e5, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1039.012791][ T2898] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1039.036729][ T2894] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1039.053284][ T2901] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1039.156160][ T2911] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:10 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x109000, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000004aeecfb92f53890d945eeb99671f9fa10b2100a33216fa3ebfe1ee4507ba887926194b2532d8ba95d977e6b3176517217dc475e5"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:10 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0xfffffffffffffffd, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000400)=""/4096, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x18e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000001640)=""/4096, 0x1000) rt_sigtimedwait(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8) r2 = getpid() ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x6, 0x0, 0x8}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000002680)=0x9f) ptrace(0x10, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x50, &(0x7f0000001440)}, 0x2f) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000380)=0x4) set_thread_area(0x0) set_thread_area(&(0x7f00000026c0)={0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x840, 0x3ff, 0x0, 0x5, 0x200}) r3 = request_key(0x0, &(0x7f00000015c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='procppp0{\x00') ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff) ioctl$KDADDIO(r1, 0x4b34, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89db, &(0x7f0000000000)={'syzkaller1\x00', @ifru_flags=0x4002}) 06:27:10 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x96, &(0x7f0000000040)=""/150}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xffffffffffffffc0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000240)={0x80, r2}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x40000) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0xffffffffffffffa9) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2000, 0x0) 06:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x68000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e6, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:10 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:10 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) listen(r1, 0x9) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1041.830374][ T2922] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:10 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x8000000000000, 0xfffffffffffffbff, 0x2000000000010001, 0x8332}, 0xffffffffffffff67) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1041.888823][ T2933] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:10 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) semget(0x0, 0x3, 0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) [ 1041.959739][ T2938] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:10 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000)=0x3, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000060000000000000000000000000000000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1042.024342][ T2950] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6c000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:10 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x183000, 0x0) tkill(r0, 0x20) wait4(r0, 0x0, 0xa1000000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) 06:27:10 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000000)=0x3) 06:27:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e8, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1042.208093][ T2968] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x74000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1042.295871][ T2979] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(des3_ede-generic)\x00'}, 0xfffffffffffffcb7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1042.412160][ T2989] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1042.474600][ T2992] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:11 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150e9, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:11 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(r0, 0x0, 0x5, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)=0x11480000) 06:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7a000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:11 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x3, 0x3}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x7ff, 0x9, [0x8, 0x4, 0x7ff, 0x100000001, 0x4, 0x0, 0x8001, 0x8, 0x4]}, 0x1a) [ 1042.682562][ T3005] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1042.743703][ T3007] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1042.792299][ T3021] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:13 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x290800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x354, @time={r1, r2+30000000}, 0x5, {0x40, 0x401}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000001c0)=""/123) 06:27:13 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x980000, 0x6, 0x200, [], &(0x7f0000000080)={0x9b0956, 0x3b, [], @string=&(0x7f0000000040)=0x3}}) r1 = semget$private(0x0, 0x0, 0x90) semctl$GETPID(r1, 0x7, 0xb, &(0x7f0000000100)=""/144) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x7, 0x2, &(0x7f0000ffb000/0x3000)=nil, 0x8}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x8}, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000240)=0x7, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r2 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001340)={r2, 0x1, 0x46}, &(0x7f0000001380)={'enc=', 'pkcs1', ' hash=', {'mcryptd(sha1-ce)\x00'}}, &(0x7f0000001400)="358a3bc537e92a9eff17c9b6ef5b6c3018b8def5eec15aa92eba568d77bf69c8f2151b077c24d68d4efe41ab7016f8593c6135eff906565c1b3ca40de9df9b72ef8e045ab8dad546f8b08de4ae2f16b3d4e16546498b06265deee44cceac2a72ae6d0dbd97f25830d7a2707b9a887a4fc08bbf31368357043567f1e822123179fc30447072fee00bbdfc0ce7c6d4ed631f7da7fcb76d21b142537cf3663df03dc8a2e00c8bae2dd7808bbadde5549bdca68c349485b28cfb2d74a0e3d13e26f4dba8b0d1bbbf846572b0e0cb7e748e01d2dcf1f91b7ef62de9a2e171102722c01c92bdee7af4abd82ba12a41da9586583bd2837d4c411180e50db1e5ea27cc58b83b427320c98047ed9415885e3dbb44067c9b41ae08297fb1338ae9c47a88720ce665353134d7ad025fe8cb8fec1ac650d6b2417701ae6c6ccfe502766bf4b0d576dab2cc2f9b2d0e7e023ab9f0d1c5cd87b52ff098ade30bcdd214a53bafa9a08005bd0d02bfa8460b67b59b6cb8c689ec348b814ac14cb7eb494dd3fffa8a08869d8e2f314e5f2240d0dfe0bf596bd44295bbf9499d19d073e748dd77d96c85c8b7fd8a2a7f4fc290bb3606a592eb78569c5009f0fe7a270d972dfc56331e598cf052d7b263c783a49cddcff5f35e33904c0ef2ad37a509ce06039f8398098ef6c975a1cc87ca457e74a13ac586a8512890a24aaabeeb77abf74160ab8b581d746be3e8d350f043cccf9baa633d6fa3e7e211a6ec0a2d78cbf68e0adfb920db81caef9e25cc5d5a1d1ed86eef8cc64252676fcba8e341b21ebe0e95c311b5b2fc2420a99ca7dd5a15192fc9aa75919b6d5624386eabc05718ff1664cc12074f084dec181b37adfbd483c170116bc8627e75f37e68abee629d98de750535abdba4f3b0af57d70f4af896ba64cb5836eb3d769795858e699bc64ebabe7c3148f9d99c4d95ce9095c95e589677f32aae4eea0f00889150dc3ea7dc8ae231174058851434426221d61c988931b677a5f4a919bd27d62eb6992e758dbeef006ff08e7801bf0cd2b9f5a115b6ccd78de6b78636f280e3c27dc91dc271dbde2b024f4a31351b5077823f773188dc95fb8832e55209f09575ce7e65e4b0a1d9d158181854b89ed02b527ddd5896740299e18cfdcd7ae66e9453b6ff3b8f2eff90afa8590040e26476800ee2dc5f99a41c1c4c8736797061ba1c8dea0bfa035796022ecddee176edb9b598546da05d541f101883ea4afcf5419ae8e085bd473cf88478afc8b4a7285615ae4e4a6927ca8fcb85828ee66ab25dc344df2ffb0d25587c2dacc5f042c630b29ce89e0007ab9041fed0af088de643b19b629b73fed1279dcb2e54a81c03483997e7a55d78f69bf7a02c8d10957f03aed8c166e65d31b001ad7b46a7ec58248ed9daff546e7e486b43322433fa08a9eb8969895d9344b1fa6b803e347daa62124059d9f9788070167ba5e7813e0b4ff2a94c0e5f8533c919e2bed6a5e0a2f93d522301c17f97cd308ba96462aa4c08d05b4ce35b36f89aa27082c6431bb2f65f983474ddcaf4863900d1e9a28b8c2362f8bada1dbf4430743ac1f3196244b2aa5f59baa7a5679405a615aff08863f8e62d644bfbab3d0e40ec994edae921c29ef405fe5d2c36c9bfc6ca1637804f0b97c7cd0d59feebdc457d82a6ae8f065a3a1d5af95fc5b79be9189b02e929b171f00ab5e8b565d3bd9790071d9b21a81df1ac6fe65de3103defff49a4472784af369b348084d27e2c47d345203ec0ec5713f9d158214a2989e6ecebf1dd3c71e78e2a9f28ba13eab091651ccf72c9c8983fb4e8c11fd5866f6048568f3ebd0efa3f50e73663dca998b06f00ba1cc4a02d250e42d64015fcd8bdc2fb7bfd7b0f59936cc7b0bfb08006bebf03aa246f7d05fe717002b033c4de5228a6754626de30c07d5ba650bbf5f6d584310605f3030e62da2a42b7b3bacd625a8ccbe3afd812300f43095c8077bfac1dface4dc1b3b675c386fbbffd441e9a3dba1334497e75789e30952d5dbde67219c60bf89cf6d01a79a42ca6fd1a0729cdb3fc17104a23e7252955fdb65bb9c9b6f77c79d6e2660a457755460985e4d61b7b511a91634305d1312d2e99dc94b69fc7fd4b707d9a5e84e69da84f6249b2ca612b8bf01db09bf328cc6546a2a5b792b1db34a46d248477c8a03065a42baf6115255d580d7934a2505bc0f1fc233a8f9dfeab4205479227f644af5978a139ddfd114f9cc84f05e775283371c5fd863808a367569f9d326d6c1c1f3ef9ec49f0e337a42c18698f67face95f4e5be4ad266dbf2f189f1701956541ed12b0c717b6cb3441142f5b8afe889c8ea7cd3af203031ab86a8156454110489f34ea74b55825c7999c98411c1a7e231b798e68e1d03fe2fe73fdd0dac130d5f21e4f6e64303699785c059c8d454c1eceb2d8f41eac0cd5e5bc2f48241dfd0fa654a6160df65e704dccfc9946e9073008317c5d16f6a563b3c5302370bd08f5965629b5a81b5ff7d9b7c15622b913f9c932ba7c7347010bb924a58cef5ec88911ce28cbe52959b04e5155d2e395f7d0503233cbcb67fb0460675fe25a388ad3ed02eec238333e42630f23be3c6a87a162d86bf747efe3bd23cf3dc48d73f96725cfbace97129e6e0d93d2ec8d296262f09ee8a5266c056016cc5581d77291aa31c634507a162a59800ebc9425750b930c869dc7b72368877e53e6804fa85299ec4c33996ab9b2eadbbdf3b822c04d1b50af90d664fffa7cbf69ec7f682c35715f696eb0f35924a250e17ff5a695264c85518b97a1849085c9a942233f2170b74a6b890e9ceb5a47c376ef304c64b3c517225f67f5aaeb3a8b892448d1b69507145a2b2038b839e9fb9b1cba167a0fded164bd4b4218dae9c746b978f0657373db69a54757b30882005b5317df84aea3eedd6ac43b5cf0e72e74c20a3a68fa5878ae8f95738089942a9497bd057d0b7471a64e58beb817f55a4ca50c0c96450ca78773889d6aa892bf0ed8ecf71a3a5dd1502b23e9a4c5e8a4dfdc2a59073c68cd3359deb678b1daf0ee6f9fa6ed2e90b9f409dd4a4a00de89d487ef1389c0013a869a2ba788485253f35444f7923b99b64c149719e4e03844c5912a9ee48240faff743fd4a87a4d3e45f2e2ff151584cfab5e1be7611853bae008719b0be7135f4618a35e6cb8e199e8f4dd11c7cdff5f07a68b01aff612a254cd34715cbd42fa019704c02b7274d723ca40534fd9b070a2c31cf0789b386df96bf78b474001fd10c3218b78a24345cce346be3c743226b46db3f36488fe4e3fa38725dc9454f894e378ba99dd4eb41b1e18e341a90299f50b968c28e43d696ab8086a0e7291ca9b6be6641eaff1ad1b92c7b510800e3f5203e6cfae6661b7548bc84bcf935c2bfa2c105d43651439fab2cfc040e79caaf0ff2546b18d124240d0c9c831b11b93a8c63210789c63edad92b4499b3b22d9968dd21b9b456c2181b7d1b8f1096169610aaba9b842fdcc27a21e54014782dfe394aa9bea18811993d7da5580bf475af40bc82201ba985277842df6a69ee399ed1ddfd6b6f43745806944857461ba3b82a10134b48ac1d0a61ceff4be781df29ad80c04ca9831eec3a3227c88c12929ef53b676251aec29ddff128cb183d56388b874a62c0e6bec97e022783ee3ceadbfb30a9f5dac5c652d6fffebd991bb7747fcd913a5c458c7d853efcf8848bd5cc515444ec612efd87614ce8279ed440677e6be0f3f0877486684832d38946b77d4a96b99d83076bd1a7c6b4cfa63822996be577d4e2a8398fc04fd38baa9504b2a8672a5d055b7b6da0dd636d3a622b1d1f184fa387de6a082a9af4a9e97d2ba4d1f2b4cc42df46b0a7ebefbe35eeac19494f4507f90f7dda8520b25807a04b639c25b135dc5097f79238ec78411694b54d1461222e0447cda5697b7b6a7c97a2418c5681f19482a99c560e6b10e27f65029caf624fcdf9761d0bbd4770f630d66cabca47f07c687d1a69237821d80d477fb4b178e78d5dc224f9a1e63c4e32b8c2c06e16f0da844e16501fa362e42d6443ab4aa95604eb13261d14c992c8bbd1e4cccf4961a9b7c9228b73f9948c9602fe215bce9fe70d9346da015d28bda64c9a96226a1724e343bad42cfa17acb1fe598acc022d67ea65091a237e14f5c171d0f78e14a9cee9ea714e83ed1bd435546c1129b9a1dbf126ee277e4b97570ce1dc85593aa3a1b02434a6ecfdaacc734ce33eed9a325e558f6c2ba7e8f4f7ad4eda4e237c593dae28078125c0d1d14f5b56f090ca060075a4032fbb0789fa5020196f1cebe86cde21f9ea022f2d9815008062450ad8b3ad9e27b7e61e0227799010bd3834922c907498024bd1c09ef4692016696bd00116a5fbbfc12f6c96884e0401d4cd226db4d60503630bd575ec0495bf2cde5965328be25ea865be069d587557f79356740f4ce22568fc4a71f26951a51878cd7f95f1fc4953000c262a8c3d6583ad7d6184ec846fa51a9b7ef531d4e5f8e350d6ed6245e1571b370187ac2e037fa6c8f3bac06407d8bc99cc69413f6231eb59364b6f296d470879f1a187a8b0fd8be79e625373d74e1c20d7bf8b4dbc794ac11828196d67797543614abee29ddb70a19d2ffd5521fa4d20179119345123062492cd6f78da0ccf56d684f8c3804e9525826e1582679df66ab4176f396812a3ca537409bbed93ebac593de7f3342f88ea1f64548916761b0cae40c2e056c431430f0615944a5b52720b01918ed24b45bb67f9a8dee7370245004cd562662302d26a3a5a3f817ece886d182e90ec411d73dc0fcee2f1cab9473e6b9ff424b9466050ea2c579f6dd9f27a485e151cec09f535fdaf5a20c275d81a6da940efde6a3adb24a9e52656e268cd36b8f242fbe9bdd52504b36484baff6566cb5779add6abb307e0dd79d16a85559d4e0d0fac939411006efa9c67db940ff39fa8047f9c72f532a92d753477d9c62359217026916fa55be2ed99629122f45fa448aea008d88c033817789f0f42e2896111c265cdd40e7d3ebdfbc828a48c2af009ed3aef7016a95d3c00b2344d7796f4f593a2b5457a77a9b0a7eb3eb820a52025e0cf61e63faed07f31ff6b13bafc1a1104d21e6ff2380d96b90b2d24c26757811f9c5246310cfcd899efc0fd962165447f510c6eb18c344442b0ac669d6d9891d6f61ad1207b3686c90fcce0c0ce7c5c2c594b72f1c4832fa3712d77e7e469757e88bc0b0bdbf86f1c4f2e0c616872ab14bd01d8efb129ac49312b5855d2cc781e20554ff06108625bca43c09cbddc224f0c044abb00ea0546751cdc77beeef3268879122a03fcb84e9c7402bf9b31052cb1fdfef6e1b618d38fcff5cff8f73e1a5377675c07a1c445b49992a9a08ea7c75568fc924c6840ef3538dbac23c8c443adbf03207da6ac050442194513d3a10778218dd3691c348b1dd20b0c02e3b06edd64ce6e94e5112a1d2e9f02de88bd005170fe163c03f17a7e2082a5d4306b350af6b13c61b0e8a2896203a8bb2ad8d0b5c2d4b4468f647590597515065ace57231b60e3ba4821d82d5c06a38461cdc05ee1393574054dfce51c7a2083afd2215e9c5b780659ce8bf5e4397878733bc1c4432404b4b9e0a71e952f5836cbd8ce17906c1249f1aa2b17b999708363b8b93b93315ebf43f92c1412812c3bb101dc956d5435e75789731f689725d6d40be02f7dae10da5e1d7ac3758f7068dc21e497ebd8229fc7dd6eb5f79d2c87ea3a3904114d8d60bb0649ffb4fef975f807559e01", &(0x7f0000002400)=""/114) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002480)={0x0, 0x1}, &(0x7f00000024c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002500)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x800, 0xfffffffffffffffd}, 0x90) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000025c0)) prctl$PR_SET_FPEXC(0xc, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002600)={0xfffffffffffffff8, 0x4, 0x9, 0x4, r3}, 0x10) r4 = fcntl$getown(r0, 0x9) tkill(r4, 0x29) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002700)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000002780)={0xb, 0x10, 0xfa00, {&(0x7f0000002640), r5, 0x4}}, 0x18) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000027c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002800)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000002840)={@empty, 0x6f, r6}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002880)='/dev/dlm-control\x00', 0x420100, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000028c0)={0x100000000, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000002900)={r8, 0x1}) semctl$IPC_RMID(r1, 0x0, 0x0) keyctl$reject(0x13, r2, 0x401, 0x9, r2) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000002940)={0x3, r7}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000002980)=0x426a, 0x81, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f00000029c0)={'tunl0\x00', 0x1ffb73fc}) 06:27:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 06:27:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x81000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ea, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:13 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f00000000c0), 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r1, 0x10, &(0x7f0000000000)={&(0x7f00000002c0)=""/4096, 0x1000, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) [ 1045.224481][ T3035] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.251400][ T3036] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150eb, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1045.310214][ T3053] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x88a8ffff, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1045.453731][ T3069] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ec, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1045.560891][ T3076] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.573093][ T3069] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x9effffff, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1045.691311][ T3082] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc00e0000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1045.735111][ T3082] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:16 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0xffffffffffffff80, @remote, 0xe0}, @in6={0xa, 0x7, 0x3, @remote, 0x10001}, @in6={0xa, 0x4e22, 0x7ff, @local, 0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x60, @mcast2, 0x7fffffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}], 0xb0) wait4(0x0, 0x0, 0x0, 0x0) 06:27:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ed, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:16 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc2430000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x400) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000012c0)=""/88, 0x58) getpid() perf_event_open$cgroup(&(0x7f00000009c0)={0x5, 0x70, 0x0, 0x0, 0x40, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, 0xf5, 0x0, 0x0, 0x4c8, 0xfffffffffffff801, 0x0, 0xc2, 0x5, 0x565c, 0x0, 0x3bb, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffba2d, 0x4, 0x6, 0x10000, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x7, 0xf}, 0xffffffffffffff9c, 0xa, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x6}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x100000000) perf_event_open(0x0, r2, 0x6, 0xffffffffffffffff, 0xb) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) getpgid(0x0) 06:27:16 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1048.221665][ T3097] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:17 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000015c0)='attr/prev\x00') accept4$unix(r1, &(0x7f0000001600), &(0x7f0000000100)=0x6e, 0x80800) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) ppoll(&(0x7f00000014c0)=[{r1, 0x4}, {r1, 0x100}, {r1, 0x1041}, {r1, 0x20}], 0x4, &(0x7f0000001500)={0x0, 0x1c9c380}, &(0x7f0000001540)={0x7f}, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001300)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000edf8ffffbfb2c0f28eef2be20ded8c6dd775dd82ad1da47378ec8fc0c55b092172ce86dd98f948331dc18956175454032019d6244e7d61de43b89df509ccd05fc6e70c475fbc95a48c8de20a2e734da29d6d57dd6756ac3c00e462098ef9193b064844f258bed95b6f794b0d76da2caf10a482e450f743926a17df0428ac3c12504d5eb690826adfb4bd0a23abb16787f8766ff6a4919b78cc9ea01f8610f01f0aca2aeb5b27e2bc8a6e7466d13e507dacc1fae93a2d99fedfd8db13d76731757c47358ae586aa73f6ddb1f4481ce82fa9eafdea50eab320f90a86170701855f5b0a877be0c3816d4706ff98e820b55e96244b319ee5e1c6d5bb6e738d251041075673056bc267230292ad896a592c0f36d4ba40b3ef4f8111cdd1639e2e66461d4e86bb6c97b94b8acde3a1eb87d3baaf06d096fc3fb138c81df704aafd754afef8a6e3a5d0d4a0a44555ac0c25e951370ad5bef9c3e9a0323242a6627a125b44840b454ee8086a140cf436eae2d2c0f0cf3e73701f9e372144df71f7a5ba78538e3bf418515de395caa012ef3e2bed96f272f1d868"], &(0x7f00000000c0)=0x111) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x100000001, {{0xa, 0x4e22, 0x4, @local, 0x83}}, {{0xa, 0x4e24, 0x7f, @local, 0x4}}}, 0x108) preadv(r1, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1000000000000131, 0xffffff7ffffffffd) writev(r1, &(0x7f0000001380), 0x0) [ 1048.339109][ T3118] __nla_parse: 5 callbacks suppressed [ 1048.339119][ T3118] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ee, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1048.428793][ T3118] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:17 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) wait4(0x0, 0x0, 0x0, 0x0) [ 1048.496968][ T3138] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf0ffffff, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:17 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x80000000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10020006007, 0x0) lseek(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x602) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0xffffffffffff3279, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000001c0)={r3, 0x5}) getsockopt$netlink(r2, 0x10e, 0xf, &(0x7f0000000240)=""/105, &(0x7f00000002c0)=0x69) mount(&(0x7f0000000080)=ANY=[@ANYBLOB='./fmle0\x00'], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='ext4\x00', 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$KDDISABIO(r4, 0x4b37) 06:27:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ef, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1048.672636][ T3157] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:17 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(r1, 0x9) sched_getattr(r3, &(0x7f0000000000), 0x30, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 1048.734099][ T3168] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1048.827163][ T3173] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x6a, 0x8009, 0x9, 0xc7, r3}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x2000, 0x104) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x9) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xffffa888, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) restart_syscall() ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x5, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x7ff}}, 0x7, 0x0, 0x9, 0xc17, 0x2}, &(0x7f0000000280)=0x98) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00000002c0)={@multicast2, @multicast2}, &(0x7f0000000300)=0xc) keyctl$chown(0x4, r2, 0x0, r5) 06:27:20 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1051.357536][ T3194] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x800000000000008, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x48) [ 1051.419057][ T3195] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f1, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1051.502415][ T3219] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000005df8b43f75abeb93a22c89da11af9d090000fc1aff056c8b2259144c692a3b1940259748b18b63e55400a7ee110b1434ec40fdcca118f9e2b221b37fa21aa44309f14127e10d46d67488881c63a3982d71b18e541923ed67c04e13f1f650da96c8db5947c30db910a42f589683f97d4b8974a0b0278463c66ed24b"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:20 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xfffff000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:20 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000013fff649d200"], &(0x7f0000000300)=0x8) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{}, {}, {}, {}]}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r2, 0x8000, 0x101}, 0xc) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000001fe8)={0x20000fffffff8, 0xffffffffffffffff}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r2, 0x9}, 0x8) getdents(r1, &(0x7f0000000400)=""/61, 0x3d) mount$overlay(0x400000, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f778ccf6469723d259766696c65302c776f726b6479723d2e2f66696c6531"]) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x6, 0x2}) [ 1051.627587][ T3232] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1051.776004][ T3249] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1051.793076][ T3249] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1051.806074][ T3245] overlayfs: unrecognized mount option "lowŒÏdir=%—file0" or missing value 06:27:20 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x202000) [ 1051.830424][ T3245] overlayfs: unrecognized mount option "lowŒÏdir=%—file0" or missing value 06:27:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f2, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xffffff7f, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) getpgid(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000008c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000900)='mounts\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/223, 0xdf}], 0x3, 0x2f4) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x0, 0x1, 0x3, 0x3, 0x3e, 0x8001, 0x3, 0x40, 0x187, 0x1, 0x5, 0x38, 0x2, 0x10000, 0x4, 0x3f}, [{0x7, 0x9, 0x7fff, 0x1db8f162, 0x7, 0x3, 0x9, 0x2ef7}, {0x6474e551, 0x13cc, 0xffffffffffff7fff, 0x5, 0x7, 0x2, 0xd8a}], "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", [[], [], [], []]}, 0x5ab) 06:27:20 executing program 5: prctl$PR_SET_TSC(0x1a, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3c, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) 06:27:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000510}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4008000) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$KDMKTONE(r1, 0x4b30, 0x8000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1052.020674][ T3275] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1052.049929][ T3280] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000943ffc)=0x8) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x17b}]}) [ 1052.120761][ T3286] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f3, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xffffff9e, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:20 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40000002001f) wait4(0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1052.261892][ T3305] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:21 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f4, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYPTR], @ANYRESHEX=r3], @ANYPTR, @ANYRES64=r3]) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x7, @empty, 0x8}, 0x1c) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="0472616e733d7463702c706f72743d3078303030303030303030303030346532342c756e616d653d6e65742f69705f7673002c6163636573733d616e792c63616368653d6d6d61702c6d6d61702c7365636c6162656c2c646f6e745f686173682c6d61736b3d4d41595f415050454e442c646f6e745f61707072616973652c00"]) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000004c0), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$notify(r1, 0x402, 0x33) sendfile(r4, r0, 0x0, 0x10013c941) prctl$PR_SET_UNALIGN(0x6, 0x0) 06:27:21 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xfffffff0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1052.586767][ T3345] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$dspn(0x0, 0x1ff, 0x40) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000280)={0x204, @time={r3, r4+10000000}, 0x7, {0x0, 0x19}, 0x4, 0x2, 0x10001}) write(r2, &(0x7f0000000340), 0x41395527) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'rdma'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x0, 'pids'}]}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x1ff, &(0x7f0000000100)=0x1) r5 = socket$inet(0xa, 0x801, 0x0) listen(r5, 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x1, 0x2}, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x40030000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:21 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(r0, 0x0, 0x0, 0x0) 06:27:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f5, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf0ffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1052.903281][ T3381] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f6, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1053.249193][ T3403] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000ffe800004e7e0e7ecc8b137ae09dc798cf771a01e84261c9ad1bce562555ce4b4f17be22595cd65d220a8628daf11781d280c8f3cfda44883eadf28f84e9186a78cf95adc84854394cb9f03eca577558f2eb19403ac8eb128c2bb090e7c741c134480d4e60dbec3950309d63674e7812a3cad1a8ef433b8e83fe217f7b335ce97640b167ed91ff9cecf77ccb9a6e17addec96a622dffdd3f06ccf1e4c5fc8509a956624728dc1aa2e8b89d7b87789dcd5b15e9b02d5a39793c25935e"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:24 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x100000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x30000) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x3}, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x218a9106a2342ea, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0xfffffe92) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) prctl$PR_SET_FPEXC(0xc, 0x10003) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xb3a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x1, 0x5, {"dba8138352edf71b06b874e2f38d7305"}, 0x4, 0x521f, 0x57d}}}, 0x90) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000200)={0x40f, 0x800, 0x4, 0x1f4c, 0xfffffffffffffff9, 0x7f}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000140)={0x2, 0x312}, 0x2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0xa0080) 06:27:24 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r1, 0x108, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc080}, 0x81) unshare(0x2000400) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}}, 0x0) [ 1055.411684][ T3415] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x800}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000e5fc6987458cc884c303bf58d6000000000000000000000000408a"], 0x21) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) [ 1055.467394][ T3418] __nla_parse: 8 callbacks suppressed [ 1055.467403][ T3418] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f8, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1055.513889][ T3424] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1055.626353][ T3432] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:24 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x31ffc, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) socket$inet_sctp(0x2, 0x5, 0x84) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) r2 = request_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='eth1/GPL{:md5sum\x00', 0xfffffffffffffff9) keyctl$update(0x2, r2, &(0x7f0000000200)="5618496832c768cc7c0258fd2e0a4e76f3c2be62bbe4ea3ace86003a2724bf88290a02c383090bf89c4be4cf58be1d", 0x2f) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2440, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001180)=0x1008) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000011c0)={r4, 0xfff, 0x4, 0x5, 0x3, 0xfff}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) wait4(0x0, 0x0, 0x0, 0x0) 06:27:24 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r0, 0x0, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000001c0)) msgrcv(r1, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xecd5, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r4 = socket(0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000580), 0x0) r5 = semget$private(0x0, 0x3, 0x0) semtimedop(r5, &(0x7f00000003c0)=[{0x3, 0x0, 0x1000}], 0x1, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$FUSE_ENTRY(r6, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x0, 0xa0, 0x0, 0x0, 0xbbf, {0x0, 0x800, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8, 0x6283cb1d}}}, 0x90) msgrcv(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1ff, 0x2}, {0x20, 0x7fff}]}, 0x14, 0x2) 06:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x200000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150f9, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000000c0)={{0x1, @name="e297b941fa3c9a816da6d396ea0d2ef2be6fe48cdc27bc1a4255dfc6ec72360b"}, 0x8, 0xfad0, 0x51}) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:24 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1055.902655][ T3448] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1055.926622][ T3449] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000300)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) ioctl$TIOCCONS(r1, 0x541d) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYRESHEX=r2, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1], @ANYBLOB="5d70e1383fb2f7a50e1a1b2eb37705a04d137cdf920940636d82bba98f9eb12ddb721dd4d3ced197d931f9f1ebeec2fe58842a13ec2cd97d9e888198c99b74ddf306136cabcc589d8f06f19beb27a326f06a1bbf4fe516bd4868b2c7fc12dfa42400f031ea7782582a7157cc0978a52ae71840a32d13804879e8b9c0ebd24a3c18fea656922337af8e", @ANYBLOB="f336bbaa9f007674eb397c9dcc63972002894131174bf025ed4f3b827b7e7b6f9b8d918d97b16c9d924fa1ca02dda97b35bb6f35ffbdb18b7b7f15adf3b766233ef860e752de6d8e38b7ff50062274a9a7d3dcd7af758f5777f430588f2ace4b315472230ea95aed6a457d05c105798bafbed27fa3f1c22454335b85a0c110b40009271f012c068f01870731f1c80b59f80aec5e92382dbc1a5bf553ef98334b9056e0726124806b35aeba0be90acf5d583966d4a12255d202a2c75c06b765a1dc042af8db1485"]], 0xffffffffffffff05) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1055.985616][ T3463] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150fa, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x300000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:24 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0xffffffffffffffba) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1056.193194][ T3480] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150fb, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x400000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1056.242939][ T3483] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:25 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'veth0_to_bond\x00', 0xa821}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x20004206, r0, 0xfffffffffffffffc, 0x0) tkill(r0, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000000)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x20, 0x3, r0, 0x0, r3, 0x0, 0x3, 0x400}) wait4(0x0, 0x0, 0x0, 0x0) [ 1056.379543][ T3492] validate_nla: 1 callbacks suppressed [ 1056.379552][ T3492] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1056.430522][ T3495] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1056.459371][ T3497] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x40001, 0x0, [0x0, 0x359a97d7, 0xfffffffffffffffb, 0x92, 0x0, 0x0, 0x4010, 0x1]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') getcwd(&(0x7f00000001c0)=""/133, 0x85) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000280)={0x0, 0x3f6, 0x9000000000, [], &(0x7f0000000140)=0x259}) 06:27:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150fc, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x500000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:25 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x8}) wait4(0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1056.818700][ T3521] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1056.830633][ T3523] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1056.844298][ T3524] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x9, 0x7fff, 0x5, 0x7}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 06:27:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x600000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:25 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f00000003c0)=""/214, 0xd6}], 0x6}, 0x10000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000580)='veno\x00', 0x5) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x300, 0x0) perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x27ab, 0x20, 0x6, 0x9, 0x0, 0x8000, 0x4200, 0x1, 0x6, 0x1ff, 0xbd, 0x80000000, 0x81, 0x80000000, 0x9, 0x5, 0x1, 0x8000, 0x3, 0x5, 0x1, 0x0, 0x140b6316, 0x40, 0x8, 0x2, 0x1, 0x0, 0x6, 0x0, 0x8, 0xffffffffffff50df, 0x81, 0x0, 0x8, 0xd, 0x0, 0x3f, 0x5, @perf_config_ext={0x1}, 0x0, 0x3, 0xffffffffffffffc9, 0xf, 0x6, 0x2, 0x6}, r0, 0x4, r3, 0xb) 06:27:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150fd, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:25 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x1ff, "d500e237889f45fc592314259d26637ca3e6a6b579a395af52c592741b9b9cfc"}) r1 = socket$caif_stream(0x25, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0xf7c) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x3, 0x200, 0x4796, 0x7, 0x1}) sendmmsg(r1, &(0x7f0000007d00)=[{{&(0x7f0000003a80)=@can, 0x80, 0x0}}], 0x1, 0x0) ioctl$KDDISABIO(r2, 0x4b37) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) 06:27:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x700000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1057.134863][ T3554] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1, 0x100000001, 0x5, 0x2, 0x100, 0x0, 0x100, {0x0, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x26}, 0x81}}, 0x6, 0x5, 0x8, 0x5, 0xe1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r3, 0x1ff}, &(0x7f0000000280)=0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x803, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x6, @rand_addr="1a9fae90e310ba77d88e5bebd5aec990", 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @broadcast}], 0x68) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150fe, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x800000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) r1 = socket$inet(0x2, 0x4000040000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(r0, r1, &(0x7f00000002c0), 0x9) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={r2, 0x5, 0x2, [0x8, 0x7]}, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x13, 0x4, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x44) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = semget$private(0x0, 0x7, 0x20) semctl$SEM_STAT(r4, 0x3, 0x12, &(0x7f0000000500)=""/239) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001000)='\xf9\x00', 0xfb0ebe23b8a7e2e1) syz_mount_image$nfs4(&(0x7f0000000600)='nfs4\x00', &(0x7f0000000640)='./file0\x00', 0x80, 0x9, &(0x7f0000000f00)=[{&(0x7f0000001600)="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", 0x1000, 0x4}, {&(0x7f0000000a80)="53a74c6fbbf697687b456c2d92c8efa829720de607432a7d9f57b4b67c47f8789cb85aedae2ba1d4bbb9a8e4c50e9c526dd6c42da8d130d739e0df7db2c31a87541baf5894f1cb766519ccf5e8fb12c5d25c61041ef575d0ab377970956b080988723867df5977ce5f34438cc82d71bb00303e5b75199c0e5f9399ff6f020db3d3cc2fbd6f7afed83488b168e3666d672c", 0x91, 0x100}, {&(0x7f0000002600)="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", 0x1000, 0x8001}, {&(0x7f0000000b40)="2f36f172958e7c20dfc6c6b71315391e591077f9ff502f584913885d2ddefeb976b63a8ae09ae0780d68d9f8a7d54a481422f26fc95946d6c066e37242e0cf16c5481da30a5d4451", 0x48}, {&(0x7f0000000bc0)="6522bd20aa52d002f9536d48d3b41e7ce357aec8d94dcbdc02eb5a1b5533be3017f5e694c3d447eb0ae8797f1ef44461bd97619cf77a49ae42d69226db4777e6132ad76bae3964ead408ee6efd86f26de2eec2e703d8ce0038f04cf2ae1b0e89a2bb6feb71291d7f8f2811d833411288a412739e0afd3268e544ddf1a249aa9ce87a831008001a81ba690d4a76e5dcf8c7ac6f775f24e85b5a4f50d988ad763aae7f929f928bea61fac321", 0xab, 0x4}, {&(0x7f0000000c80)="27c30ac8ef76237c75b3c969607a29700a28b89d3a257811d1c070d6f48056bcd58056be393b7c5d3c18f6793c82459aa555cf2b9c50650c6e73c2c4948b88fb63e37cce25092dea4439c01f68b6ddb2dd7d2784291175f1b4950385d3811abd", 0x60, 0x3f}, {&(0x7f0000000d00)="9d6e4262060fa64c75e8bf07a4bcc04865b86fa426bfeebc1d456d22c5001d9ba772150f2e97b7b68fb958a68fa671b9907b80547f0e1ad30423a631bdf3625c83af929301720835035570fe65060dcf0fc29e92282c", 0x56, 0x4}, {&(0x7f0000000d80)="c91e32604dd3884050dbea551e42837d5b357dbd224c8afa9855a8b78c12422a41e4916d91e0808095af92a464bc8def47880f9e3e1f5e12fbafc63fa660ecb14376277754c2b107d8eda296a53e61e0275560c1a7d84f4af1291d769f2430eb6d1e08bca4e25f401b43acb2a8c38461d7487c764322429168a0af4db0ee3bed305c06b4f84047195403f5857b83d5b33d29b54e2734d0b1e513a34f13b50149f03bb86ba819bef2da2b35185522d390be1033b3ca4d401b7cc5e0d75683a080b12499410c8dbaec3be2e12be69fb3f98666010de952e425f3dfd45a9a16", 0xde, 0xfffffffffffffffa}, {&(0x7f0000000e80)="2bb9a2cb3b7e56f4a92b1160aa2f37ce0e765820d00e50214c01516028244380cfa91e1348afc096144cc6439e5155923446d8b177e2cf67f1c554ee5c59059a339e2570c156f0f0fc163330538ff483", 0x50, 0x8001}], 0x8800, &(0x7f00000006c0)='\\!vmnet0\x00') getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="f000000000000000150100004ddd0000d4e3815c79e856fac93c2e487457e94f78d6565842de77841ed112a7f3902ddfd8cc65acbda1015768d7c37da5e4278661d59006d4d7d62d00e99abb48d4e32e279ba529124311091a69b2078cdc931315f125ee44315d9f49699cb75e9f78e5897fb75e914b6fe890b4bba1e2a2ef15bd9beb78d1eba70dae5d283a29112794ca05ba5792dbcc88b739a8ebcdbb7508d75069dbc3ad29404946ace72bdeda90af8532d14222105909951e5e394e9b676fa2aa25702ae7aa11cdfa03bf130c5f91b8ffc17a60c173d21be659f4a878f695d0b33b76b8b878fcbd60aed4f43800e80000000000000001010000000000005dcc358e45c1d285534c0b9d15227c7da3e2de93e011a88e7dcbdbdec552db787e3fe4765348aa1dee19df7a536b07bbf5f3be3daa0b1df830922365a6d077c011839e031877aead60e45d2edf37a855287af116e9f2ccdb24831f17b07c3ef5f885915307b0495d834130b4742bb8ad2fb0f2958a3dc5b25483ee293506543660cf2d970a5fe7ef066a4e594aa621cc041a55c71d9cdb4d87fe3c9755203a273c790aaad989c71b3c10a1908201310e3e045fcd9567bd06cbc6ae416e5a836343a9d0c3b8783b747155653d0ff5f1d3e03aca33000000005057a8fdd931906b7f1446ae7d56b339694fe8e7d3bb9fe4a11fa9e24c2c60081f176a2b76a4d98418fd7179326f3ff3814dfee1cc14c0eead7605c2f9fdbc85655127764c8f1e41059eaa9dcb2682e95ef867ed738d3d88abdb3007ad8b720773772027383fbfbc6c160cfb4bfd89a3c798faac45233d22180429f811543d62a466215dab4963ac47b995454317596d12d522435119e1b8d42fb38be1038d136d7a1718b459fad41c9ba04060bb71ef"], 0x288, 0x4000}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000001180)="d41d1ca596b9cd58c508c19ac5e193e70b6a61ea106664c0ccfd8e60210170d6d9c98171032f1fc840303a76f798360e7fd7da593a42b9f974e5fd22ccf07990b402228784a86aa45aed057b98c3d3afa33d5c4c75d4b4ba55ea61aaa1a9990cb59c2d41a79b3105a20000000000", 0xfffffffffffffe37, 0xc0, &(0x7f00000000c0), 0x10) 06:27:26 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x8, 0x1, 0x80000001) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(r0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 1057.410379][ T3582] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:26 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xa00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x150ff, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:26 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="dc5e7490720382ee82f3", 0xa, 0xfffffffffffffffb) keyctl$get_security(0x11, r2, &(0x7f0000000140)=""/244, 0xf4) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1057.802538][ T3604] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60c8d07b00140000fe8000000000000000000000000000aaff01000000000000000000000000000187009078fe800000000000000000000005000000"], 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) [ 1058.063352][ T3629] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) write$cgroup_int(r1, &(0x7f0000000000)=0x3, 0x12) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15101, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xe00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:28 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000010c0)={@rand_addr, 0x0}, &(0x7f0000001100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xa, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8b80, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2a}, @jmp={0x5, 0x8, 0x0, 0x3, 0x3, 0xffffffffffffffff, 0x5}, @ldst={0x3, 0x1, 0x7, 0xf, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x400, 0x1000, &(0x7f00000000c0)=""/4096, 0x40f00, 0x1, [], r0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x41934, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x2c) 06:27:28 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x1, 0x400000004, {0x2, @raw_data="0d3c8d68f575422e5714926fceb979f9c37045329059771d1e00843f1408685961643466441074e87c1655f8e66556fc033781a10e417cc5f56ae8e209755c7c8b7c60fdd481c7de5eede51fbc335eb4bb35106fbbe8e08aa442c35392d9f2486a79bee33947f3e2a8a668c72cb1dfe2e7004f7c495f2c8ac5104d2d2c3da4910104dc4e45941735540d0e057051f5c306b5388581a95ef7bfddf72da530988733c22450f9be21463bd13f8080471ae5b153e1a103350e6acc3daa352c3b9fcdadaac6355de3ccb6"}}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) accept4$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000080)=0x60, 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x46, @tick=0x9, 0x3c5, {0xb, 0x81}, 0x9, 0x2, 0x7fff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e345df46"}, 0x0, 0x0, @fd, 0x4}) [ 1060.310632][ T3644] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15102, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1060.479955][ T3666] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1fffffffffffe, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x6, 0x7f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000140), 0x27b) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 06:27:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000878000000000400000001f7b90adc1ee84b29f61f400000000000000bd44a3757b86a513dc016c7a6a4f5f2d2387066aa30ab9abcaaecc210ee74752be8a27d3200bcb067225f6f2e50acf14175195454e8020288bdb39defb7d6a4b112186bd325418008fd94a3178a388b67825eade"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto$inet(r1, &(0x7f00000000c0)="280a30989499a29c4b8bb0ff0935929c40da8fd877309e8affd448025f460af196c4ff01f9c0e7c9aa444e714bf73cfda67cab332541320f1a798061b3", 0x3d, 0x20040000, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 06:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x1000000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) r2 = dup(r1) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x3, {{0x80000001, 0x7604, 0x1, r0}}}, 0x28) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r1}) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 06:27:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15103, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0xfffffffffffffffe, 0x8d9c, 0x7ff}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x2, 0x0, &(0x7f00000015c0)=""/4096, &(0x7f0000000280)=""/170, &(0x7f00000025c0)=""/139, 0xf000}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="5a4064c45e40a6a0397bc47d260d2026cb71b881a888700c22b863d9a71af27db3c74268d20925bd28b52066d978777778bf68f295e08841295ddc59f4b461c11a5825be715084610f733e45e2b626fa7c7ebdcb65493f4da4cb70369fc8e97c8d890a1c2f5619a64b45d5a86189524c0dafae8dc84851839f122de934ce1163dee1e8ea62af26f19de0c5ad8017d3250a0196759e8d37f70b1fcc32575a9ddd071b82e861e9ee25901b5e161b2688370e97916fc74a4c2f84d5d2e93fd23a317e13f32d13d82f45fdf00186b3c30831edfa546eb31113c64408c75cb45f84ae9fb72832ab4bd7b4b75a1248fe6dee0b4d85ee3551fad1378163c16cf7f6b300f860c71a9eb0dccc16541370437791003d926543e7f201d746bf7b746396ab67c5d642be1a8935ab34bb17d7028f894ef1b959f36f412765f69a483c3ac8fc0f5eb0b0a51b9f1020d5c30079a57f6461cb4febc1fe4bdf5cd83f11c944b7ff295ac288ae612a49414665b23ae0e4165bc885c608c2ab024ccc8c77e5c3db09b4008709d88b725fde9eeb4f35635f2a62ee952ad2f11ff3c967196f6b035c893f3187c5cdbccdd04426ec7ef255de60088012d42eb210b6103378771d3252e8294d3bfc9880772d5d903ee971261c4f8ff64e0d89b456e52dfbf0f940cb7de234199a08ebaac9d9aeeedad541c60390efa2d3a9c4d3839329734182e6680a39f57e727be11a5bc9e64ed2f807bb7817db8bd39aa62a7c6fc1dd38dad1a398904b9016dd97bc8b7ab8506baa5a20ac88dab0a36e89dcbd7b52e3cbcf0ef326c8bce48fc9451e5a716d2270699d40b7137b875328269bddef3d1e9155cdbb3956bfa22f144902a5eb19d89dbd38d765ddca9a13433136d2366bf9a93e5a54d362ca220bee9811e8682a02ecf3515e3a52827368799eb913b4893b7b4443eac52145ba13549b237581033da65e5221295605beee522a17fc1a751097221eba3f5bee918b2f0384cbb602550921d8a7849ff5d8fbc8c5e1d2fbcc6fbd271d4037802d71de396f38da47830ec19e7a579fa2ec36b010a679e2c1e4cdbb0c2c9b64e1970a25bb0aaec2a82445d1579e0df141478c0fe1432b678b4ebb21bc38d9f6a996ee7f01ad7f59c16cb2dfbf8e95acca7e45e48590a9d052bfc017c85eb9a55b2892d9d619d5b37132adf614ce7be1321541d2c51b3ff091f2d1e4dd6093f3b80bdc4e6ec6d678aa0692320299454d3994520773fc3b047d32d8531120ce83cca2a0ddd15eba6c7d6a27118140e9de2153837cfe5dd9394d5fc44a292e195b4ab032230e953ec933894c3bf4eac34f26ec95a5d552e702d15a434f6fa2092053b1c7479db454603d61dac3d10302d19a24735793f2af8718828fcdeee4b4b0389f7ce2d4543741b09ab7bef38b7d6a9a6ec39bb12a8f2ca4af9c7d2ca1d6e0dfd473fb7dcd734927e8d04cad620afc6d61aade536e1b65d2dc9cbcef89f0f51b8f8289a862ba58c41b8ca492e25529859fe5fc09b6036587bd5dab1f8b0b77e1e4184ecf2f5a827e419995588e614994fdfb3b9ea99d68dde5732fdd7dd8b4d6b188bdb4e07709d6e0c5caeb98d8aace44df76f598434639873f6c04a532d698caab2f9f3088b6bccd9e82ad31cd575e7d460f66ad1c35bf6036f61f7467b29a05e24dc11db74aa670cf2de86ae52dd6d1045b4aaa722e07521aa109b0231a0ec81ca9efd8f8d31ba9f700874608e6ebeec50b78d3868bcc370b191d26d6649cbd2f62efa5da18b11a6f821e4d1e0732ac08f6818d67ebcaec15fc02de509eb054821736d49f102fe255facf4ecb2de69dc2c62695c98ebf377ff36a68a166ebfeedd9e2d83ad16727e5bd95960e8febf48b4b4e8a34b62534d9b3c2d21ad556f77d1e6b41914be8957efb26762aae64179429f448111b664cfda6c2f4f342e19e22b7464c6b458c22b6cbcdea6f1afb63c16900df47025892018202c58e8141bdc3e12374f204b3eb66fffb9952fd54deaf30c04800da757de566e167d7287ff0561c283b618d676c574bc59a569ac8dbd8a768010d493d7755ac8e7b5d9d38b220732221221c3599851c3b4efd5daf60d090a62bdc7605f4fd082156cad4898ccb966a334003f6f3498c5a0704f7b71f392ebfc9de2877756599b038a869b765d0168bbf579b75162809e6c62d778a45fa586a1ed7716a7331c59cd86e1edfaee55f7a7bf507ef9afa50f66c3a3c8a5f5681cb915f5254f6f5d4a24947472f68d65f9f86cbe550ddf3cd3e3f3db4441a922e49fb6e36fb8413ab9cfd570982d81212f6679239033798aa08ccf160a48c7d762661b23d2129dfa555bee08aa97eed6acbba380c1de436946457ee142126b9cc9727d979c21097868a061133e16d2c7e601bcb7e1b0f133df542b16b257b2cf4c6c6a33f73db9c34c89d4f2d4c50988c87df0be4290241404566262ce11829150c65675ca4740689c26d2595275a9070c02ee19843a377ab3aeeae2852cf9b3244866800642cea6801c2b99efd9a6dfb4b7714859947a34d0396657f3abcc01ac1feee5eed8fb832ba0ae03c40a7efe93163f1f31b6173b90ca5bf590da4b95e330006c13ffab31776ccd1d6f9b9c14626a6a9116dc4791421c0517af4375e57ed077295d265d9f5ab8fdded09c731c903e90c9e18507ee2f9672b3da7459e39a8bff65170832a0313a932dd5f91655f4f6033196507e6743c634dcc7e34c93bf400715d40f698f9667f2d450b9e44250e2973c20f410bbdfcb5b5754a769620c7723731cb18b5d532e885930a48337341310b2f6229a6691f37b84a900dba986ccfe163762a844406d3e867eaa5f94d8afe6a1a480b730122146a7974d68b51b9c0095716280a581311162e18a9ecc36da614d06dbb78af03585c827ad642d5fc59c051fceef431c961339e325a2fe33be41b23f873acf381b7678f9d113795140dd9f6e7186a950fd67a48e6d83b23917403fdb588870e1e7ac489f633e8801005ce2086d35e2a4cc92a09dfc44eea1744a2e7abfa6fc0bbd9076833031f9ce7da5b76114a151bbb67860aeb8da418b59dc7e5ec6ad320704de6bd3cb51331f0aeb288105bdb88be84ab7d34549468c2bfe5c13a33c4d738a434715f9ecd8e217d606e4622eca8bb54bf374d5d898c885aab3b6963c3bea124482a1f87bf59d5f36f2d5941cffb28ffc161c87d788553a4dbff48adbee99cf5e8098da472917564782c2bdf91fe0833474ce7a155ec6c843f24662966ff9bc47c3caa459eb28911e687ac09f0404c5385a9d21262cab5083ee9543e2f3998f08e15b75b703c48a240bf97fefc6e61a64d8fea2e81f8c4f6a61d9a5fc4a483befecc18810a80a9fa74682a9ff189d0d819c123632e34f8248b6767292161c1b24864c5a0df0fe906a39077642d29ca9c15471022ec50ffd8cd76d8850321c07bc193afa5ebd819bc5f06df9f824aed4124df77fdfc39d79abf1f4d8a6ffc490ffe9fb493ac81703455b72714296f6716923d389167d0782d1b78bec405e510e691677ceb96314c7eab1bbe9367d768d401a7bc85e70eb9080dd4353fb50c5f76cc409692b96c85c4021cf6e1a62568c93bf4a8d2c981bbe826886d379d8eb3bda991c37dc21d5ea3b60a3d1cfe99e721588785ddb8dfe3954148b052730f77059d16b68cabcf99966bb414d883350d815878bab1a8fb3ab2bd89cb0bff1f83cc1fc166767f3ab8cd4ebc46a4b7d7b69aec177605457826bdcbe123a24ef4e12d5b939766392b8eb87688565c5beac3f4517bbff5831af404299b032357aee1312cb35847b7015ed9cfb58f421a13f83ac3a86ceac97c4c1db9148e67ada1c5b1ca1a135f7e0c3fa6ba46f3abb5bcc67318de64027ec4c6121c00b297d4e5496e7ec540582e4faad4a32dc3d4e0c14d97f07df421044bcf1464988692b4d7254e923e5dcfb7d8bd6c911e2f10c874900af300942afb7b2c6b863c50bab8dec99d3b9a927661ebfe1b566caa5adf59e272f5f7ef4c0a4a770ade1f6e01daa0be304b780e45368dd353c39a89804e9b0f396666932e12fe737596b461d2c11f2bf58be61c2d431d5fb3dfe8695c090753ca180662bb62ebbff7f2b4e5ada3539c33d7965c14b7ce890c4477eb14e29b4767d62da5fa30ee33cca1cac68595f4db510a08d63031ccbd34c4c199ff92b9542ec117e1da407cf704f66a1454e79ed1f607dc29776a7276c185e3b37ff07e7ade73ee7e41937731ca0e2270140d766e0fd8de7f431167ca69a29364dfc19e815fb68ee72da92e27784b7cb2c6f6a03c0f2aa023dffa1d072e1a443708dca218492d093c5a098e727d8bdea89f0d12838eaaa79441ab6bb08123ae50792a20f55bda732cf946da1819941531b03ff03f74d972e2857e57c923269cb3d5d94274bfd808fef653f096e027f8d93f8cae11db79fcf94d9b98c376928c9507f82ae966e934b9e6aefe06863b4d1f07ebbcc5fc5cdc8425d9c18e750230d1e3468b74f5ba5d7414f39b64ca55f5ca5e235aa0e57d8dba51c9ca859f80b6a24abba27533cac4ba7f2b6c7f7bbe8fcc991e158574f0278d6015f84946c13c0ecc2b9e39be0e7de16eef913042a2a9850274d2abd5720b55b86d212fa752647eccfed06bc08a98d3035d066bf305a5b6bc8ea2d0ae120fd69f2f0707f72edabfccdaeedb00b7978aec5b463ac143a9abe5a9a254e3644168bb6649352cc37e895e5bd3869b6d0ea91206717ecc82d545255e738f73211bcc5a48f1aebc4757ea12728d8730f2cd94e7d14d6b2dbbac2e68acfe9007fe36d7b5ce115c27ff5709a2b31cb904dc0e26f4c9c7034ab2e2464de6c2c724017caa1bd1ac1a5df3e6a7ff60ce2fbbf34b288f6f50cb6d957031ac8304bcc06dc9a2aaa2c7ee2864de7518fa3293074c11bccc503d401c53e2886469e698011ae6f1fd9d8b205f6327ecd5a172e09e7b53e3f04bd4f03bfba6e9b220c7d110556a91993d799e75b98ebd679ebc3a8102180585a7a0eed17219ea14c0da2275c961c905cf1b3a30b49fa54875e2d192c5f3e9161b260cfe62432ea76bace5e3dde00ff55ed208bfa4f7289b632381c7d1e382fc329814434f339396d4cae35f7aec51bb79d0db2060e7b507c4e0d24502084875887069f938f91ee0b3af9db2d015ad8e04d97b8571f3b50b0ac548be103a90e144408ee805a8f716b537ab63ac7150d260794926f8035c706edb1ea1982d75f0f5e9c6ae732597e7ef9f42082dd6d1a6e63974f20948450beff8c495c86bbff69a38a816213e1e01c60b0e0d03465f576513b3d2a8e8ea818e534d8235d3cda0fca3125cac832ed892676e3d7aff78bcb1da49f26bcc8a303e94bc8b6ec97f8535a144f36a83ece0c23ea2b70ebd69cf502d3f6e871563a5b7360eec3983e0f5724f96f9bf8138c45efa56c1b95353fe0f646dce3a710f5a45a46af360be4fff868f14ab6929f99d6e0ff8f3d2269bf01e613f66a8ceff91673f8a6df84df0afc1e5c4e0c617a343a9948fe554d9a8777d906897d4f7c6f8cf8eb055495b0109d53f9abf2e1dd85fad5ea8ad0079f5f72a796d51678f0652ea3bd3187256835643de46cbfc3e28bae4fd4f3fbd6588bee1a4a60d065d37097577d034d6c2bda3f351672f9e38b0f20980ffc2cb9f218d08f760a76e2ae1d11e7f10eb1c2a3a281f695e66b4ee36d04356774efedfee9f4c1600054254838ea6c1226289a28ee80d7d48de629d780e35fb542a541174214d23caa9d2e09be6135645eec9cb8ab9", 0x1000}, {&(0x7f00000000c0)="93501079cd8c503728d32b817d8092aefa20ac56da363e99d1149d439fd3ffa068752423302216b4bf5df2588c782404ce3926919859a890fb0bd8ac42910c32b28092e2c06c89b453", 0x49}, {&(0x7f0000000180)="c0cbfc1579806c6019257b2754d83ef0c39e8a8ecada039e31a5b4718d3558505fdcddff3fb657b93c822e267a908376278f3ebdbd85fa25da1ccd9b4d05c411fd271ffea6b3b245ec9bb742514805db102f4b", 0x53}, {&(0x7f0000000000)="253eeab91229a0", 0x7}, {&(0x7f0000000200)="c27d6fd6d9225443bbb7523e10fd5c8065ce96df654f66419608c9e3bd5c6cfc9aa1698f5669105fa4ac61f8107b74d0e48913c5742ada3b732ee8ca50385b497421816f5127a8a96707fa901d961308", 0x50}, {&(0x7f00000014c0)="3aebe7f0e162f2226349342822efcdc162f17b3a910821d9d26cfca0cb7d2193ee5a7e4f84e941a57b13d18c5af57a1df20c34ff5562c4dea12389dc788d2ebc176e51250753d6fb609fb975a7fd6fd17bb9c7e4389af67a75eed7afb6c50f62f5d5fab930be147c3ce1a72c3dff280b59c83bea5de4d50fa7d24c8558d6eef1886869b0f4274b7b22f8a12c739489cfa5668b858b8c1aa73b939af574d3e3ebffc5bd57f5ef812a9c972bf07d59a097e372d6cd1e0e78696773fc4a8d2502182f05f6fbb3f11960ff3f89f253abde3be846f555b82bd2dbe25513dfc34079e7348c9592cb44a1fba1b5750433b2882f20ccd161e4", 0xf5}], 0x6, 0x6) prctl$PR_SET_PDEATHSIG(0x1, 0x14) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000002680)='\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1060.889645][ T3675] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:29 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) accept$netrom(r2, &(0x7f0000000040)={{0x3, @rose}, [@remote, @default, @bcast, @netrom, @remote, @bcast, @null, @default]}, &(0x7f0000000140)=0x48) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15104, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1060.964667][ T3689] __nla_parse: 11 callbacks suppressed [ 1060.964676][ T3689] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1060.987572][ T3689] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.100899][ T3711] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:29 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x2000000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15105, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1061.214160][ T3716] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15106, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1061.296835][ T3730] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.387690][ T3736] validate_nla: 1 callbacks suppressed [ 1061.387699][ T3736] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1061.460160][ T3736] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:30 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x3f00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15107, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4800000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1061.727855][ T3744] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.739357][ T3746] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.760154][ T3745] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000000)={0x10000, 0x41c673a0, 0x6, 0x100000000, 0x1, 0x9}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe) 06:27:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x4c00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1061.836562][ T3756] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.861288][ T3758] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.993696][ T3766] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1062.033218][ T3768] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000002c0)=r3) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000003c0)="9140d48925f098fd927c439093125774fa5692cfe3259be9f1622352ae399fe06006fec1bbd862a2f154be76e60195ffdabc4fa19c2521245164e846c023abd77af4c41bcb3735da5c8e") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202000, 0x0) tkill(r0, 0x20) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7e, &(0x7f0000000140)=""/157) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0x79, "b82bca7c48b2156ebe5d15639dcd9a9753e0efa20cca20ca25b22747d08fe2f8ffe8f42e3eb5f3d90ad3c3127b3f86151a8f6aa259532f8e6d84dc518e41ce4f5139b421ecbb54307b5bb3e987fd02b71ed40facc9e45152575fa5e685b365deec5b66d6295429b2f49987e2ace6bed27dd95111e0862229a1"}, &(0x7f0000000080)=0x81) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r4, 0x1, 0x80000000, 0x3f}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 06:27:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15108, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 06:27:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6000000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:32 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="285474dae6badf3ab85f04001439710900211ec5ed6bf235c23f642548a8cc259863016cee15225b1a274a2cda339d9861c5905797ff177fb9239f957a0fd774acfa434223589d4870332fa165d4a261241b9217f30300836e4b4a0db282216a2110b5404814ef52fa7b1c21f6fd187f0d6d70d921451c6445ee5929f7d6f1cc59e9d65fa0eaffebc273870bf7c4e077924b7fb96a6f5ed1e3cb4abdbf16d5fb", 0xa0) r1 = accept(r0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10100, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x13005, 0x1f002, 0x6000, 0x5000], 0x0, 0x20, 0x1c00000000000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000002012d80cbe8d5968da49cabec334a7000073ffac7fde11736796c4b6e1748890ba8237d70124d5b2c1ae1b3d9d256c0c618309ccc79e6fe85763fe342f8afb4d000000000000000000000000000000"], 0x20) 06:27:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6558000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:32 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa9a, 0x0, {0x200000000009, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}], 0x2}}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4e00, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) connect$packet(r1, &(0x7f0000000800)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) [ 1064.115295][ T3777] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15109, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:33 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x80000001, 0x202140) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r2 = accept(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000040)=0x80) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7fffffff, 0x0, 0x7, 0x7}, &(0x7f00000001c0)=0x18) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000400)={0xa, {0x31ae, 0xd, 0x1, 0xd54}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r3, 0x7, 0x7, 0x2, 0xffff, 0x8, 0x66a1b6b0, 0x0, {r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xd3, 0x7, 0x9, 0x8, 0x5}}, &(0x7f0000000340)=0xb0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) times(&(0x7f0000000440)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) 06:27:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6800000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:33 executing program 5: clone(0x821803fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4207, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1064.387306][ T3813] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x6c00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:33 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x1000, 0x40) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000004c0)={0xb, {0x8, 0x8, 0xfff}}) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x10000) getpeername$llc(r1, &(0x7f0000000200), &(0x7f0000000240)=0x10) r2 = gettid() r3 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180)=0x4, 0x4) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={r5, 0x80000, r6}) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f00000002c0)=0x86, &(0x7f0000000300)=0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) r8 = add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r8, &(0x7f0000000500)='cifs.s\x81\x05ego\b\xdc\xb1\xe5Jnj\xe1\xc4\xf5G\xaf', &(0x7f0000000400)={'syz', 0x0}, r9) wait4(0x0, 0x0, 0x0, 0x0) 06:27:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(r1, &(0x7f0000000480)={0x8, "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", 0x1000}, 0x1006) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000751e0efc1d678a30000f9ff0000000000000000000c16000000000000"], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:27:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) setregid(0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180), 0x4) r2 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e20, @broadcast}], 0x20) syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') write(r5, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x1}) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000002c0)={0x5, 0x4, 0x1000, 0xffffffff}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x28d, 0x88001) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:27:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1510a, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7400000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:35 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1067.133925][ T3863] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1510b, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1067.183768][ T3861] __nla_parse: 8 callbacks suppressed [ 1067.183777][ T3861] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.252695][ T3875] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1067.300141][ T3878] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x7a00000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast1}, &(0x7f0000000840)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000880)={@initdev, @empty, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000a00)=0xe8) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000f40)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f80)={'hwsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f00000014c0)={0x11, 0x0, 0x0}, &(0x7f0000001500)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001640)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001680)={{{@in6=@ipv4={[], [], @broadcast}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001780)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000017c0)={@initdev, @rand_addr, 0x0}, &(0x7f0000001800)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001940)={0x0, @empty, @broadcast}, &(0x7f0000001980)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f0000001c80)={&(0x7f0000001ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/43, 0x2b}, {&(0x7f0000001b80)=""/72, 0x48}, {&(0x7f0000001c00)=""/1, 0x1}], 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002140)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002180)={@initdev, 0x0}, &(0x7f00000021c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002240)={'team0\x00', 0x0}) accept4(r0, &(0x7f0000002280)=@hci={0x1f, 0x0}, &(0x7f0000002300)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002340)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002380)={'bpq0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003d00)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000003e00)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000050c0)={@local, @initdev, 0x0}, &(0x7f0000005100)=0xc) clock_gettime(0x0, &(0x7f000000d9c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000d840)=[{{&(0x7f0000009bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000009c80)=[{&(0x7f0000009c40)=""/24, 0x18}], 0x1, &(0x7f0000009cc0)=""/33, 0x21}, 0x744}, {{&(0x7f0000009d00)=@caif, 0x80, &(0x7f0000009e00)=[{&(0x7f0000009d80)=""/56, 0x38}, {&(0x7f0000009dc0)}], 0x2}, 0x9}, {{&(0x7f0000009e40)=@tipc, 0x80, &(0x7f0000009f40)=[{&(0x7f0000009ec0)=""/15, 0xf}, {&(0x7f0000009f00)=""/27, 0x1b}], 0x2, &(0x7f0000009f80)=""/119, 0x77}, 0x80000000}, {{&(0x7f000000a000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000b280)=[{&(0x7f000000a080)=""/4096, 0x1000}, {&(0x7f000000b080)=""/237, 0xed}, {&(0x7f000000b180)=""/201, 0xc9}], 0x3, &(0x7f000000b2c0)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f000000c2c0)=@rc, 0x80, &(0x7f000000c440)=[{&(0x7f000000c340)=""/81, 0x51}, {&(0x7f000000c3c0)=""/79, 0x4f}], 0x2}, 0x200}, {{&(0x7f000000c480)=@l2, 0x80, &(0x7f000000d700)=[{&(0x7f000000c500)=""/119, 0x77}, {&(0x7f000000c580)=""/194, 0xc2}, {&(0x7f000000c680)=""/4096, 0x1000}, {&(0x7f000000d680)=""/88, 0x58}], 0x4, &(0x7f000000d740)=""/202, 0xca}, 0x3}], 0x6, 0x2, &(0x7f000000da00)={r33, r34+30000000}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000e480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84081100}, 0xc, &(0x7f000000e440)={&(0x7f00000023c0)=ANY=[@ANYBLOB="c4090000", @ANYRES16=r3, @ANYBLOB="200327bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7401020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004007f00000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000400b509bd000000010065208000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1c02020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400280400003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000008000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="2802020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000001000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004001c00000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004008907000008000600", @ANYRES32=r16, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040076620c4308000100", @ANYRES32=r17, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="7c00020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400b200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="4400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040003000000080007000000000008000100", @ANYRES32=r22, @ANYBLOB="00010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r23, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r24, @ANYBLOB="40040100240001007072696fff0000000000000000000000000900000003000e00000008000400000404081a2d3c242a35abc376a3a900060000000000000000000000000000", @ANYRES32=r25, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB="3801020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004003705ffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ebde000008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff0f000008000600", @ANYRES32=r30, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400d400000008000600", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r32, @ANYBLOB="740002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r35, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040004000000"], 0x9c4}, 0x1, 0x0, 0x0, 0x800}, 0x8000) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x21) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1067.480254][ T3886] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1510c, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x8100000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1067.556494][ T3887] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) wait4(0x0, 0x0, 0x0, 0x0) [ 1067.636010][ T3891] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1067.748356][ T3898] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1510d, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1067.808136][ T3907] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.912337][ T3917] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x84, "baff1f2edf4553487d784dfd0e3c005938414aa2a16f60cb1bf473da99473746c8f235051d72f973fe38c95da266b21917a6a01ecb05027deaf7b1ab151192bdb9dd8fdd4c807992499362255137b088517ab81526fff28fea5c98d1739cfc427b74b79a07650f57cc29179a3d00c8f90e771159d6c505fffd18e50961f52962701aa3ad"}, &(0x7f0000000140)=0x8c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0xae7, 0x61}, &(0x7f0000000200)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x55595659, 0x0, @discrete={0x5, 0xffff}}) 06:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x88a8ffff00000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x329001) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r3, 0x8e89}, &(0x7f0000000280)=0x8) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/86) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x61) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x20000000, @rand_addr="cfc140f124646c6b53f03270b6d835bb", 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @broadcast}], 0x7c) close(r1) openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17a) 06:27:36 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1068.029062][ T3927] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1068.054843][ T3917] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1510e, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1a000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xcf8, 0x0, 0x10000, 0x80000000, 0x6, 0x3}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r2 = shmget(0x3, 0x4000, 0x135, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/122) [ 1068.089567][ T3932] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x9effffff00000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={[{@file_umask={'file_umask', 0x3d, 0xa00000000000000}}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) mount$9p_virtio(&(0x7f0000000000)='file_umask', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4, &(0x7f00000002c0)={'trans=virtio,', {[{@mmap='mmap'}, {@access_client='access=client'}, {@access_uid={'access', 0x3d, r1}}, {@access_any='access=any'}, {@access_any='access=any'}, {@noextend='noextend'}, {@aname={'aname', 0x3d, 'hfs\x00'}}], [{@context={'context', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'trusted-cgroup\\'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, 'hfs\x00'}}, {@pcr={'pcr', 0x3d, 0x6}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hfs\x00'}}, {@obj_type={'obj_type', 0x3d, '@'}}, {@appraise='appraise'}]}}) [ 1068.207174][ T3947] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='gi\xea\xdc\"\x0f\x02O<<\xbb\t\x8c\xfad_map\xb8\x009\xec\xcc\x00\x00\x01\x00\xd8\x89\x14\xe8\x96\x93\x1e\xafiQ\xe0\xb9N?iJ:\xcf\f\xe4\x82\xbf\xc4jg\xb6\xbfw\x9e\xe6R\xea\xd4\xa8\xb3\xfff\"\xe5\xddQC\xfcaX\xf6\x99\xf7\xff\xd0\x04\x00\xbef\xd5\xe6\xf5\x1e\xae\x11\xc3\x15\x06i\x94\x1fS\t\xa2\xcc|v\x85L\xf2\x8a\xd1\xddW\x16f\xd8|F\xb5\xe2\x95\xb5\x8a\x16\xad\xf5\xd3\xa6\xd0\x885:J\x17U#\xa9n\xe05^&\x8a\x16\x13d0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffff7, @mcast1, 0xffff}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x1b}, 0x10001}}, 0x2, 0x7fe, 0x6, 0x5, 0xaa}, 0x98) write$capi20(r4, &(0x7f0000000480)={0x10, 0x100000001, 0x83, 0x83, 0xfff, 0xffffffff}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000540)=@hat={'changehat ', 0x2, 0x5e, ['/dev/ashmem\x00', 't\bnu\x00\x00\x00\x7f\x00\x00\x8c\x00\x10\x00\x00\x00\x00\x00\x00N\x1c\xc3\xfe\xc3.\x12\x1e\xcc\xf2\xd8\xd5l\x04~K8\xff\xe1S\xfa\xc1\xbb\x8bx\x9e\v\x83\xf6\xb2q[\xfd\xd8\x8b\x1d7\xcc\xe9\x82\xe8Y\xda\xec\x02sh5\x8d\x90J\xd0v\tu@\x13\x94\xd3\xe2\x8d\xec\x914\xcaKy\xe9K\x9cP\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\xff\x96\xec\xf8\xcaJH\xef\xfc\n.}\x0fnvI\x83\xa5\xfc\xd3\xe4(\xa7&\xab\xd2\xd5\x90\x87\xea\xddO\x1f\xff\x00\x00\x00\xdd\xb1\xc6\xae\x0f\xb6\xfcEq\xc3\xe6p\x95\xc7x\x91\x9c\xf4\x10W\xfd\xea\xb3|\xa1\xb0M\x06C\xf1\xb5\xc3\x8a\xaf\x1b\x98\xc9c6\x13\xa6\x94\x14']}, 0xe4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000004c0)=0x3, 0x4) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) 06:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc00e000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:39 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0xfdba) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0) 06:27:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15110, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:39 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @irqchip={0x0, 0xe7db}}]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x440040, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xfffffffffffffe6c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7, @rand_addr="bf1b4906c62adebc9117f6c0678c707f", 0x4}, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x101}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x2b}, 0x2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @multicast2}, 0xfffffffffffffffe}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x5, @empty, 0x3f}]}, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0xfff}, &(0x7f0000000240)=0x8) [ 1070.776825][ T3973] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_loadWbalance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x29e001, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000180)={0xfd7d, 0x1, 0xfffffffffffffffb, 0x1, 0x9, 0xd4}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x52) 06:27:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15111, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xc243000000000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002440)={r2, 0x57ab786}, &(0x7f0000002480)=0x8) socket$inet6(0xa, 0x80003, 0x800000000000006) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=""/128, 0x80}, 0x2000) 06:27:39 executing program 0: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000380)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0xfffffffb, 0x2) r2 = epoll_create1(0x0) epoll_create1(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x2, 0x3, 0x0, 0x4}}, {&(0x7f0000000100)=""/102, 0x66}, &(0x7f0000000180), 0x27}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0xa0000000}) [ 1071.070021][ T4010] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15112, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xf0ffffff00000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:42 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffff, 0xc0a00) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00['], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x8, [0xe803, 0x0, 0x2a0]}, 0xd}, 0x80, 0x0}, 0x0) fadvise64(r1, 0x0, 0x2, 0x4) 06:27:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x109000, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x1, 0x0, 0x4}, 0x9}}, 0x18) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003300)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000003400)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000003440)={@ipv4={[], [], @remote}, 0xd, r3}) tkill(r1, 0x20) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) wait4(0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:42 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000880)={0xffffffffffff8000, 0xd002}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffffee, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000008c0)={0x9, 0x10000}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000003004000018010000180100000000000048030000480300004803000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c432a9c2d5d570604b4fb0000000000000000"], @ANYBLOB="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"], 0x480) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000240)=""/248, &(0x7f0000000340)=0xf8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000025400000f0ffffff9400000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000900)=0x1813, 0x4) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000980)={0x6, 0x1, @raw_data=[0xbca2, 0x7, 0x9, 0x34b5, 0x3, 0x7e0000000, 0x7fe0000, 0x4, 0x8, 0x41, 0x2, 0xbec, 0x2, 0x200, 0x5, 0xc0000000000]}) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000380)=0x1) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000940)={0x4, 0x1000, 0x8001}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, r1, 0x0, 0x0, 0x0}, 0x30) capset(&(0x7f00000003c0)={0x20071026, r5}, 0x0) 06:27:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr, 0x5}, 0xd29dc560186eeed0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000040)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 1073.842395][ T4027] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1073.919554][ T4039] __nla_parse: 4 callbacks suppressed [ 1073.919564][ T4039] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:42 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000100)={'nr0\x00'}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000040)=0x101) 06:27:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15113, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1073.970241][ T4039] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:42 executing program 5: clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0xfffffffffffffffd) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1f4, 0x1b, 0x0, 0x70bd26, 0x25dfdbfd, {0x14}, [@nested={0x1e0, 0x44, [@generic="e2ea0f2e7ebca9bcbdaf12b5d1e43fe8a62b80b9542c5acd327aba2c4758fe1344771e87c466fe239004bd54c280e49f921b988eb987b2e5b9b0142d34a29479ec433ff047578f2193", @typed={0x8, 0x3f, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @generic="0ee938a469735d97ac4937a9b434a212f0bf1b6ccd6d20c72760adf9e8d01cd77e97d793f5f25d7c6d49c115e2ceb884a097c0", @typed={0x10, 0x44, @str='sha512-ce\x00'}, @generic="fc8dcb928a255ba93f5fd7e3141d41a4440605eb0531475cf045426f44b8e3c37be161d09827b7616d31f867d038155d8259c66423b93395aad9607c2e6eb99a9c194f7a62211f7b42ef2d", @generic="c8ab3ec363362a4cccf3d7d504a324f3a486d02807c125762f0a15715efe9a053dec214aeea129751daf08d32ce511890674a74cfead75e1f4f3929f468e73a6ee789e9fdfb58d6676b80dd9c50280044f8cb32cad9536923f97ac5f5ac83e632f6e61f7b5d0effabf22e18687856e18bf31aa514e3e23b26575b280df4b64c5a2691aa8a44a130f2efc300269869eef3f1aaba835d56eff22d7f52a6d653877e5f9c361d1564e7e5da7bf679b6a73ceda5b2c2cb6a11067f0d9006a8caed6e4b360d4abf41b8e8ab667af5d19a5efa7d090402c3d367e9b9803a2b595fe97d4c8d7d0d3ef85931f7387900466f9cf08758c7dd6c3cf6dcf3c1d"]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x8, [0xb8f7, 0xa2, 0x1, 0x7, 0x6, 0x101, 0x8, 0xb7ed, 0x53f, 0x1, 0x6, 0x8, 0x3, 0x10001, 0x0, 0xaefa, 0x3, 0x2, 0x5, 0x1f, 0x6d, 0x5, 0xffff, 0x27a1, 0x3f, 0x3, 0x6, 0x2, 0x1, 0x1, 0x7, 0x0, 0xfffffffffffffffe, 0x9, 0x200, 0x0, 0xffffffffffffffff, 0x2, 0x8a3, 0x5, 0x100000000, 0x9, 0x0, 0x5, 0x6, 0x40, 0x4, 0xffffffffffffff01], 0xb}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000003c0)=""/177) [ 1074.080816][ T4056] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xffffff7f00000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:42 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x420000, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200003fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:27:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15114, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:42 executing program 2: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_submit(0x0, 0x187, &(0x7f0000000280)) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x100000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000180)={0x400, 0x0, 0xfa}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0xee, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x4, 0xf15, 0x555, 0x100]}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) getpgid(r4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000400)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) keyctl$clear(0x7, r0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0x101, "ba1aebc89984d31ee45ce796f8a39172d72671f15d8975892e573a663df69b1e", 0x6, 0x0, 0x3, 0x0, 0x5}) 06:27:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0x8030ae7c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nlmon0\x00', 0x600}) set_mempolicy(0x0, &(0x7f0000000080)=0xb87d, 0x0) [ 1074.231954][ T4067] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1074.267407][ T4076] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1074.364608][ T4080] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:43 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) migrate_pages(r0, 0x20, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @local, 0x57717667}, r3}}, 0x30) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15115, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:43 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20848}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) 06:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0xfffffffffffff000, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1074.635598][ T4097] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1074.658703][ T4097] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000500)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x3ffd, 0x200, 0x10000000000fffd, 0x1, 0x80101, 0x2, 0xfffffffb, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="2a000000000000000100000000000000be0000000000000002000000000000000035438c000000000000000000"], 0x2d) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(&(0x7f00000008c0)=@md0='/dev/md0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000740)='bdev\x00', 0x2000023, &(0x7f0000000900)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000480)={{r2, r3/1000+10000}}, &(0x7f00000004c0)) mount(&(0x7f0000000940)=ANY=[@ANYBLOB="3040abf7d58436d7496072d88d9fb924bf91f65251c2210ce6c33f5cf63ee466a17a37b30eb2325bbc9556b9ba20d4df40a9cb69d15d3308712819f3d2f27695155ef2b723bc4fcb5d38c46f71f14089eea8a3bb9dfa1e774fccee35dc618d63aa608e8d3f0421aabde758c08399866dd6f0c9c72140b221ecf2e98b2b85bb8df6694a3257941def6f22226fe196c8f7dbdb72ded0cb0cff7255fd1bdd58500c68b6b53726"], 0x0, 0x0, 0x80000, 0x0) r4 = dup2(0xffffffffffffffff, r0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8e9) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) listen(r4, 0xb6a) ioctl$int_out(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f00000002c0)) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f00000007c0)={0x0, 0x0}) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000780)={{r5, r6/1000+30000}, {0x0, 0x7530}}) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) [ 1074.753742][ T4107] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1074.840692][ T4113] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15116, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1074.881006][ T4118] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1075.028718][ T4131] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x48) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 1075.069124][ T4133] tmpfs: No value for mount option 'ŠuU{-4-«ÀËn×6*5ì2cŸÏ¸¶všAK•Ôdx#ø ñSÄÂ^æbªl)eb' 06:27:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15117, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1075.184490][ T4138] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:43 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x75b}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0xfff}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) syz_emit_ethernet(0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00143200fe8000000000000040000000000000aafe80001000000000000000000000f9a900000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYPTR64, @ANYRES32=r1, @ANYPTR, @ANYPTR, @ANYRES64, @ANYPTR], @ANYRES32=r2, @ANYRESHEX=r2, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES16=r0, @ANYRES16=r2]], 0x0) 06:27:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1075.353012][ T4151] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1075.477576][ T4161] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x1, 0x80000000007ffd) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080), 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x4) arch_prctl$ARCH_GET_CPUID(0x1011) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000640)='cubic\x00', 0x6) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000600)=[0x4, 0x2], 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in=@local, 0x4e23, 0x0, 0x4e22, 0x3, 0x2, 0x0, 0xa0, 0x36, r3, r4}, {0x7, 0x8, 0x1000, 0x1, 0x401, 0x3ff, 0x1, 0x9}, {0x10001, 0x5, 0x3, 0x9}, 0x3, 0x6e6bb2, 0x3, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d3, 0x7e}, 0xa, @in6=@loopback, 0x3507, 0x3, 0x3, 0x0, 0x0, 0x26ac, 0x7ff}}, 0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000280), 0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x3, 0x8}, 'port0\x00', 0x13, 0x80000, 0x2, 0x1, 0xfffffffffffffffd, 0x20, 0x6, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x800, 0x8000, 0x7}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) r5 = fcntl$dupfd(r1, 0x3, r0) fcntl$dupfd(r1, 0x0, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\xf6', 0x1ff) unshare(0x40000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x2, 0x8001, 0x2, 0x3f, 0x8}) 06:27:44 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:44 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1ffc000000, 0x10000000400000) fcntl$setstatus(r0, 0x4, 0x42000) 06:27:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0xb70b, 0x5, 0x1ff, 0x1fe, 0x1, 0xffffffff}) tkill(r0, 0x20) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KDENABIO(r3, 0x4b36) wait4(0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15118, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1075.663421][ T4172] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x2082, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0xfffffffffffffffc, @ipv4={[], [], @broadcast}, 0x4}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x10001, @empty, 0x101}, @in6={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}, @in6={0xa, 0x4e23, 0x0, @rand_addr="3d05a4157e7fcd7c088e5f55683e6c56", 0x1}, @in6={0xa, 0x4e21, 0x35e4, @local, 0x3ff8000}, @in={0x2, 0x4e21, @rand_addr=0x2800}], 0xbc) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x408c5333, &(0x7f0000000100)) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) [ 1075.767564][ T4177] IPVS: ftp: loaded support on port[0] = 21 06:27:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15119, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7ff, 0x8c040) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 1076.152739][ T4177] IPVS: ftp: loaded support on port[0] = 21 06:27:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x44000) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000000002004e23ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000700000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000fa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) [ 1076.231834][ T4201] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1511a, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1076.338567][ T26] audit: type=1800 audit(1551594465.019:282): pid=4210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="media7" dev="sda1" ino=17634 res=0 [ 1076.438647][ T4219] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1076.456859][ T26] audit: type=1800 audit(1551594465.139:283): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="media7" dev="sda1" ino=17634 res=0 06:27:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(cts(xts-twofish-3way))\x00'}, 0x20b) sched_setscheduler(r0, 0x7, &(0x7f0000000140)=0x100000001) sched_setscheduler(r0, 0x3, &(0x7f0000000180)=0x1f) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x22) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000200)=[{}, {}], 0x0, [{}, {}]}, 0x98) wait4(0x0, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ptrace$setopts(0x4206, r0, 0x8, 0x68) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x3124, 0x3, 0x2}, 0x8000, 0x9}) 06:27:45 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:45 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x4000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000004c0)=""/6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={r4}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000240)=0x6c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0xffffffffd18e8c19, @in6=@dev={0xfe, 0x80, [], 0xd}, 0x4e23, 0x4, 0x4e20, 0x6, 0x2, 0x20, 0x0, 0x0, r2, r5}, {0x2be, 0x400, 0x7, 0x7fff, 0xff, 0x4, 0x6, 0x5771}, {0x7, 0x9, 0x10000, 0x3}, 0x4, 0x6e6bb7, 0x0, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d2, 0x7f}, 0x2, @in6=@mcast2, 0x0, 0x4, 0x3, 0x1, 0x81, 0x8, 0x4}}, 0xe8) r6 = socket$rds(0x15, 0x5, 0x0) recvfrom(r6, 0x0, 0x0, 0x2000, 0x0, 0x0) 06:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1076.556467][ T4219] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1511b, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f00000003c0)="0a5c2d0240316285717070") r1 = socket$xdp(0x2c, 0x3, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400040, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f0000000400)='syz0\x00', 0x1ff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x204000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000340)={0x3, 0x41, 0x1}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000300)=0x1e) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x100000, 0x0, 0x19013, r1, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/207) r4 = fcntl$getown(r1, 0x9) move_pages(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0)=[0xff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x2) 06:27:45 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/217, &(0x7f0000000040)=0xd9) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$cont(0x7, r1, 0x80000001, 0x3f) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8100, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="cbf6e9dc7ab81842adda3c2fddd29dab5727af73f0bca3365bb82d9e6f85cc8d1692db83fd16fb3deb646fe1dd8b25a2efb2a7806c6739c701fc1f4f2f3ffd78fcb6d0d830060ddcedbb0111c222cb681bde6bae7db36ea9a96b25b9b3e5c995487da4e1c21baf1c791904fffc4fb6743b6f34e0ebce059560557bfd55b32791697b6b0fce345e42ef16a07513cf14e07a70071abf9dcc94043db6caa0ade8e4b6132da1f6") recvmsg(r1, &(0x7f0000001e00)={&(0x7f0000001780)=@xdp={0x2c, 0x0, 0x0}, 0x17b, &(0x7f0000001d80)=[{&(0x7f0000001800)=""/227, 0xe3}, {&(0x7f0000001900)=""/250, 0xfa}, {&(0x7f0000001a00)=""/249, 0xf9}, {&(0x7f0000001b00)=""/175, 0x2f}, {&(0x7f0000001bc0)=""/215, 0xd7}, {&(0x7f0000001cc0)=""/47, 0x2f}, {&(0x7f0000000280)=""/93, 0x5d}], 0x7}, 0x20) sendmsg$xdp(r1, &(0x7f0000002200)={&(0x7f0000001e40)={0x2c, 0x0, r2, 0x14}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001e80)="d4463ef006b6df7e9b165ae24dfdf324170036713aeefc14162317af0536cab0ec54244fd6957b0b7e48f7132eaba952ddd9e20e65cf9c36fc212d6750db051bc19c33a3d9f9aeac252aa1ea16340ce9cc330844321bb0ec9f7a81fb6f5befffaa32bd8c47f6f58e253574789bd71761dd3f509a9c315226a7fb313647f9f7", 0x7f}, {&(0x7f0000001f00)="74fb9d14e14463b8cba58f746c7ab663eb526c939ac0f5a3c5baefaa5ec7e7e086b189c6d60e6a40aea9b4078b8fb55510e145c72a658f2b176733f8d8c20fd16f1de1507c948537a32b27996d79b50d751b17d03859284bbc808fe4df561f68ab6879d6d6ce3932f75dcb9aa103858efd78892dd88bc8", 0x77}, {&(0x7f0000001f80)="9c6d1e48237d1fc88643454ed34a36eba63553f4315862acaddefac88297261bdd49ebfa7ae66fce450909e40de4def40e0544fad98b0c03b9338701e48048692f6c75efbae9413a047f132a61af87374fa8695605eb91c2a48f627af6485a1de3460b164a6eb7de7e9721a03380afb281a45b535cbd0d1816b3e56863d90dabf3463cd440f1", 0x86}, {&(0x7f0000002040)="f99b839e8e9801759c57a6793662362f267780b63c983fe3d2d6035273fb82be982c1295966b280e17510b2dd827ebe7fcff6d7b3a0ba954065b87b062821ddc18557cca7f88de39e5776578c063fde1de68b05038dc3a1138b846be19b8261825d3f182c2b4366354c73cf2677b3825414b348cc680d8603e503f4f7436352a4d986652133816f6724f7180f9be24973a8fa9d644df80522317868e229ffa6854c098fa939dbd17e066edd12cfff2476279486233aa5fd709393e4ff3847bf46970fdd83938770fdcc9cfc85787d09243741e90f9102d", 0xd7}, {&(0x7f0000002140)="3e9c44dc9778840efe90512aa81ad66a231681dff2cc7bac38c34b30b4e84b5547a8810ce3ae91", 0x27}], 0x5}, 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa000000000040000300000100000000000000db5b8a6bee73d4b3d8377aaa65bcee3937c5bf0fb94ddf13dc8b3c5c693177e69ccf3e545daf59a0ebc13488639f72d8e0733d436296d8bc98976c2c99780300c7625328a6ac66f04765367339966dcfcbfbaa5254fc21ac2c0cfbd38e5164f05cc7d1b17f8cb6b1928dc3"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="10fe2b6c2fd780443f23ea288843d908015ac13e858005e2a42c2abde6c67a6000708bbb32cd498844640101fe69cbf080e4c43a3c727f67177d329352d17ea71a48b4518633ad1ea6edf77fddc41f4dbdb48140d2065be54d2a56db9d9230ab99ed7682693229eed1b6baba1451bd78fb32f0b54ab85c320383955b4132464cfd41b646349fa5e60b0cb748", 0x8c, 0xfffffffffffffff9) r7 = add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="0a789788751fc2ecc7011848f36b952157", 0x11, 0xfffffffffffffffa) keyctl$link(0x8, r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, r2}, 0xc) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000401800000000000000ee00000400be9e90472c03469146d1bd03d4"]) 06:27:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:45 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000300)=@ng={0x4, 0x12, "46665f2a831d54"}, 0x9, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', 0xfffffffffffffffe, &(0x7f0000000380)='y\x00', 0x2, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x156) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r2, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 06:27:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1511c, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200000000400200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x2}}) 06:27:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace$setopts(0x4206, r0, 0xfff, 0xa) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x10000000, 0x0) 06:27:46 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:46 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x14) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x50000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000100)={{0x7fffffff, 0x7}, {0x4, 0xfffffffffffffffa}, 0x100000000, 0x1, 0x1ff}) socket$caif_stream(0x25, 0x1, 0xfffffffffffffffe) syz_open_procfs(r0, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000080)={0xffffffff00000001, 0x6}) 06:27:46 executing program 0: pipe(0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x6) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000000000000}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0xffffffffffffffff, 0x400}, &(0x7f0000000200), 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000001c0)=0x9400000000, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 06:27:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1511d, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x50001) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x7f, @rand_addr=0xfffffffffffffffc, 0x4e20, 0x0, 'lblc\x00', 0x1, 0x4, 0x52}, {@loopback, 0x4e23, 0x2004, 0x0, 0x0, 0x6c88}}, 0x44) 06:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1511e, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x20000000002, 0x0, 0x0, [0xffffffffffffffe7]}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r3 = getpid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r3) 06:27:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xf9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x4, 0x80000000000, 0x20, 0x906, 0x4}, 0x98) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") timer_create(0x5, &(0x7f00000010c0)={0x0, 0x2e, 0x0, @thr={&(0x7f0000000080)="ce399d194fa207d6b5b709cac5f8e82f13dc83504dbc887e80ea0f69c4b0c76950857b92e295fdac81ca17b861e3fc4f62f777457f72b9edc3fa8c1ef0", &(0x7f00000000c0)="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"}}, &(0x7f0000001100)=0x0) timer_delete(r1) syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x0, 0x3], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1077.995045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.000906][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:27:47 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1511f, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:47 executing program 5: clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x42000, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000040)=0x2a7) 06:27:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = dup(r0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x131, 0xffffffffffffffff, 0x0) userfaultfd(0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0xa6ba0) io_setup(0x80, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000000c0000, 0x12, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:27:47 executing program 0: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xe8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) rt_tgsigqueueinfo(r0, r0, 0x19, &(0x7f0000000000)={0x41, 0x9, 0x3}) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f00000001c0)=')\x00', 0x2, 0x0) sendmsg$xdp(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="d051bf31ffbc4bc110ddd6c119aac064da97a2e949a3bfabb34b436fbd8f4d256af41dfda24cd649fd7926c53e7c26d620dad147cc86cb5f824ff4ef2a1175ad27af63250c9067224d49dd7bef549db58fc6166e4e21d1f1f674d389a67af99e799e644c29f8e05de574410e569e2343d454da341e6dd1e37e701f8589c53d5800fd74c55995bf1caaf4474d06155107332c92ebfd53a081cff64cbad0f2d6e4205219964d", 0xa5}, {&(0x7f0000000140)="8add800e2173b2c98d2a0bd21bd48b169100d4c0b772f006cc572abe2a6b27c6be648eae5af5a4c9d10c2a9b360ca004b7d5aef3ca61142d7f7d488267b9ca8e4b5cb80977beecb045f5ea5ac5613914341be16c1104fa3bc860ee39bad1d9c51b039f4623df32b9ab75663eb0cd3953", 0x70}, {&(0x7f0000000080)="3f00860076bfc7aac31f38d2e86aca190536899c585965d2b8bd7054defafa582f3d32c3ca018e656526071fa9f232907eed", 0x32}, {&(0x7f00000002c0)="2c675b5f6f366689b5283c5f9c7fc8380f28048a95283a2f3148c6d8e8be607fea62da2e3ca65a432a54a35af6cf6050fd8af836e8799735ddb8b0d47c5980bea635377ae518a143cf7991e3b95bfbf887e185da12f0562217ce94a09e1f0554b4186e18a38c7e29d66d35a3412434b06fe1582c3c955726181f0d28cc823a0b7aa9f317b9670d90e4e5558e0a04d1877d6118f5830b8b3b0247be13de46498ebe282f228c5af15d5205316eb6f42b7ca3ec630ac09e58a5511ea0a7a3a2a8086d701721da9a482d726a0a15c34a9c987753ffd5227173f7be252223d985ce17ab0677b3", 0xe4}, {&(0x7f00000003c0)="5b9f90f9c34a61f7c1ca41b39c281637f013464e838bc067ab2ea21d875a7cb3738a9f2c847e69f38035ec985b1bbaf777668cea56095de4a3d0b2124d2d55d4ee7a74b8846736e3ca73075f7d7b13f058bc501ae1d61da6812acfd2c5bdb4d81a84d2a8dbe5f107a76d095a440a4c3aee8cadf5813757118abe9d4fd3fce4e14d97ea583b1b97bd7ef21864981183", 0x8f}, {&(0x7f0000000480)="177b8c41646808044915769a0d78d59738a497ee0adb3b08ee6f4cad7984b8842b325ba45b0c05b3104d1549238d5b324f018e06b52a6ae1d8bf7c220ccb7c3bd21453e168beb9a7aebf7fde4bb4e9a525de571993a9755f982e428d016106910019640a67146ea4a1ef36e1c2752acd6c19ed85edb34d95f488df6c9ac7dbb85799708136123db7b49b78fd612b6b0bf4b3608885fc300b1ddbd8593342", 0x9e}, {&(0x7f0000000540)="e54f63b0229ff59c2a4928550e47e799cbeadd09d4a36b7b753186003d3fb8947aee0d038f3c2f45c0", 0x29}], 0x7}, 0x4000) ptrace$cont(0x20, r0, 0x0, 0x0) 06:27:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x4e168fe0f6fdfce7, 0x0) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x7, r1, 0x40, r2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x29) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x2, &(0x7f0000000340), 0x0, 0x0, 0xfffffe4b}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000004300)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 06:27:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15120, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() gettid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm_plock\x00', 0x30000, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002440)='./file0\x00', 0x20000, 0x4) r4 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000002480), &(0x7f0000002500)=0x60, 0x800) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x1e, 0x1, &(0x7f0000002540)=@raw=[@ldst={0x0, 0x1, 0x1, 0x1, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000002580)='syzkaller\x00', 0xfffffffffffff001, 0xc8, &(0x7f00000025c0)=""/200, 0x40f00, 0x1}, 0x48) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002740), 0x4) r9 = syz_open_dev$binder(&(0x7f0000002780)='/dev/binder#\x00', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002800)=[{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001380)="1d519870aa8e23e32eb1dde0bce3d6e63cc0cb7ca1926d08fdbe2d862dc0d724ccbbe833297dc91fd43afee2060ab05e4e342b988e1139d384c2c14a1f5933eb36f157ca51", 0x45}, {&(0x7f0000001400)="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", 0x1000}], 0x2, &(0x7f00000027c0)=[@rights={0x30, 0x1, 0x1, [r2, r3, r4, r5, r6, r7, r8, r9]}], 0x30, 0x1}], 0x1, 0x40040) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) shutdown(r0, 0x2) [ 1078.943410][ T4399] __nla_parse: 17 callbacks suppressed [ 1078.943456][ T4399] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15121, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1079.008666][ T4399] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.190608][ T4414] validate_nla: 7 callbacks suppressed [ 1079.190619][ T4414] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:48 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:27:48 executing program 0: 06:27:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15122, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:48 executing program 2: 06:27:48 executing program 0: [ 1079.504845][ T4426] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.536679][ T4428] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1079.593437][ T4430] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15123, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:48 executing program 2: r0 = socket$inet(0x2, 0x20000000000003, 0xfffffffffffeffff) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x3}}, 0x26) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @local}, 0x50, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x3f, 0xc9a, 0x0, 0x0, 0x8, 0x81020, 0x4, 0x2, 0x0, 0x100, 0x0, 0x8, 0x0, 0x2, 0x0, 0x40, 0x0, 0x400, 0x9, 0x0, 0xffffffffffffffff, 0x14, 0x9, 0x0, 0x6, 0x81, 0x8, 0xefdc, 0xf94, 0x0, 0xea, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_bp={0x0}, 0x400, 0x7, 0x3, 0x4, 0x101, 0x3, 0x8}, r4, 0x2, r3, 0xb) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1400) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x1}}}, 0xfff1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) dup(r5) write$binfmt_misc(r5, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 1079.769371][ T4440] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.792188][ T4441] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1079.833559][ T4443] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:50 executing program 5: r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$unix(r0, &(0x7f0000000d40)="e2e7f34dc8ca22c8ea090eb48a960b5d93d138bce4a4972e2ef0f3ba710500000000000011238c9e74636962e6c239dc2421ade8b2a769100a6f67680cbfc06a4a0435d8b14cbeca1042d178ee6da93fa9b812e2ff470f001ab44a49ae54f37eab6655267931c7304eea76775ce4f66c0be5b2a7a18c31f412a9c510da8866d4c12cf67eba76a45c84afec77d761f90c5a982a921dbeab223d620f", 0x9b, 0x4000, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x101, 0xfff}, 0x2) r1 = socket(0x22, 0x2000000000002, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x35, "4e8e34c02adc1d1db0fa0f3b207c7197836f2356387226b7cbfb128f9eee081acefbf28b95f17cb375d49a2a5276b7a8cc3464527d"}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x0, @random="b06de07ad55b"}, 0x10) 06:27:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15124, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x44000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4b0005"], 0x3}, 0x1, 0x0, 0x0, 0x81}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in=@multicast1}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000940)}], 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000500)={0x84, @rand_addr, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00 '}, 0x2c) poll(&(0x7f0000000440)=[{r6}, {}, {}], 0x3, 0x3ff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f0000000140)="14"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, r7, 0x4}], 0x0, 0x0, &(0x7f00000003c0)}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x401, 0x8853ebd796b63f81) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x82f, 0x0, @dev, @remote}, @icmp=@timestamp_reply}}}}, 0x0) 06:27:50 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1081.975547][ T4456] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1081.991087][ T4457] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:50 executing program 0: [ 1082.042327][ T4462] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15125, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:50 executing program 2: 06:27:50 executing program 0: [ 1082.225579][ T4479] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:50 executing program 2: 06:27:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xf2, 0x25, @buffer={0x0, 0xc8, &(0x7f0000000140)=""/200}, &(0x7f0000000240)="6c353c7996a4682437e2590288c19c77a07e422357de1705497730eae4cfda1b6c5c68cf85cd95cc0ca1ce3bf8298104462b3b169e76870f350c4dd80a335a3fb7798d577913c7bc9bf0f8f5d40142a35d4504d432d6d94fbab232cbf51b9d0922aeee36dd06777a74b85b0146ff982fe237a18a8f0fbd308fb5b407c6c47484aeb498246dc594e847d38ae5b1df44be4f53e6217ceba7fdf32e1c4c791e5b9231f0ec4e28ae1532cfea99539dd1da61dd8e249d7bb02f89eade22a86cb326e5fe8440ffc31c4f66d31d531750546cb8164ee8fae02eea38917e1f77f0709f29acc56bd9135b437736929004b2fc8a384c5a", &(0x7f0000000040)=""/58, 0x6, 0x6, 0x2, &(0x7f0000000080)}) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 0: 06:27:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15126, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1082.314680][ T4489] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1082.335954][ T4489] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:51 executing program 0: [ 1082.446441][ T4498] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:51 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 06:27:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000001400)='/dev/cec#\x00', 0x0, 0x2) syz_open_dev$dmmidi(0x0, 0x3, 0x80) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@loopback, r1}, 0x14) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x401, 0x800) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x7, 0x9}, 0x5a}, 0xa) 06:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x400, 0xffffffff80000000, 0x4, 0x728}, {0x4, 0x1ff, 0xfffffffffffffff9, 0x25ad}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1000000000401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ceaffff2c1d239e5d7b17412e2b0001ff00faf713cbb8e05e10e38aecc513d5f8cdf6c6"], 0x1}}, 0x0) 06:27:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15127, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xffffffffffffff30) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200100, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000140)={r1, 0x4}) read$alg(r2, &(0x7f00000000c0)=""/91, 0x5b) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1082.888619][ T4531] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x6040) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, r2, 0x14, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80c4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x29) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) clock_settime(0x3, &(0x7f0000000480)={r4, r5+10000000}) wait4(0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 0: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, 0x0, 0x0) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xfffffffffffffff0) r3 = socket$inet6(0xa, 0x3, 0x84) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:27:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15128, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1083.090955][ T26] audit: type=1800 audit(1551594471.769:284): pid=4543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="media7" dev="sda1" ino=17634 res=0 06:27:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000007c0)) [ 1083.173994][ T26] audit: type=1800 audit(1551594471.809:285): pid=4547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="media7" dev="sda1" ino=17634 res=0 [ 1083.206747][ T4554] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:52 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 06:27:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@session={'session'}}]}) 06:27:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15129, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:52 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000100)=@bcast) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x80000000000a, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080)) 06:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmsg$alg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000007000000540005002c0002000800020001040000080001000e400000000000000000000002ad3ceaca528f06754ba51b174a9a1c08000300f3148431080002000200000008000100756470001c000200080004000400000008000200008000000800020000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) getpid() recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) [ 1083.862697][ T4574] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1083.950602][ T4580] __nla_parse: 8 callbacks suppressed [ 1083.950613][ T4580] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1512a, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x1f, 0x9, 0x7, 0x7fffffff, 0x800, 0x3c1b, {0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x401, 0x5, 0xb8, 0x401, 0x8}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r2, 0xfffffffffffffffb, 0x8, [0x101, 0x7, 0x9, 0x0, 0xffffffff7fffffff, 0x8001, 0x800, 0x4]}, &(0x7f0000000240)=0x18) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x4) fcntl$getown(r1, 0x9) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3fc000000, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0) 06:27:52 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x1ff, 0x2, 0xff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0xe3479d}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x100, @loopback, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0xff, @local, 0x65}, @in6={0xa, 0x4e22, 0xfffffffffffffffc, @rand_addr="e123696a6a7b45e59b3f8aa3a3855855", 0x5}], 0xb0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000300), 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_open_pts(r4, 0x0) sched_setscheduler(0x0, 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x143) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x5c931, 0xffffffffffffffff, 0x0) [ 1084.029465][ T4580] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1084.120918][ T4593] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1512b, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1084.233119][ T4601] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1084.356427][ T4612] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1084.383665][ T4611] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1084.430975][ T4613] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:53 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 06:27:53 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x40000000000da39, "f02c56e86aedf2a94e534b7cb2b26fc3567d705b969ff6a42eb33d9a6b223656", 0x0, 0xffffffffffffffbc, 0xffffffffffffffff, 0x13}) 06:27:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x6f, &(0x7f0000000380)=0x7, 0x4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x200040) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigsuspend(&(0x7f0000000400)={0xffffffff}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0x1, r2, r4, r5, r6, 0x94, 0x6}, 0x800, 0x8000, 0x1ff, 0x1a6, 0x40, 0x100, r7, r8}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xa, &(0x7f0000000100), 0x2) 06:27:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1512c, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x400000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000000180)={@mcast1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @rand_addr=0x3f}, 0x8, 0x0, 0x1, 0x1, 0x1, 0x3}, 0x20) fstatfs(r0, &(0x7f00000000c0)=""/94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408201, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x4) 06:27:53 executing program 2: syz_emit_ethernet(0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="e4caa604466414bb2580b979317838da2922d119", @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32], 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffebe) [ 1084.759130][ T4627] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:53 executing program 5: futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) accept4(0xffffffffffffffff, &(0x7f0000001480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000001500)=0x80, 0x800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000029bd7000fbdbdf250100000000000000164100800018001700000003000000037564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/164, 0xa4}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/147, 0x93}, {&(0x7f0000001280)=""/81, 0x51}], 0x6, &(0x7f0000001380)=""/124, 0x7c}, 0x48fb}], 0x1, 0x40000040, &(0x7f0000001440)={0x0, 0x989680}) getgid() [ 1084.838119][ T4636] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1084.849892][ T4637] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}], 0x2}}], 0x1, 0x0, 0x0) 06:27:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1512d, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:53 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x10, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x8, 0x100000000, 0x400, 0x7, 0x0, 0x1000, 0x4, 0x8, 0x0, 0x0, 0x2, 0x8, 0xa4, 0x0, 0x1, 0x8, 0x81, 0x4, 0xa4, 0x1, 0x89, 0x9, 0x9, 0x40, 0x7, 0x1, 0x8001, 0x40000, 0x0, 0x2, 0x7, 0x6, 0xfffffffffffffffa, 0x1ff, 0x3, 0x8, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x3}, 0x20, 0x6, 0xffffffffffff2e01, 0x5, 0x5, 0x7, 0x6}, r0, 0x4, r1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000220015002000000000002275a95dc35d28a9effee1004e17599da5eea0a0e4fd6934332be6bb1783b6716f7e1a63bd710b86ed595b3c8e0bb4f9733d6f79360614ae8a3052d6efbd0281c75dedd3dfd92fe67125af254fed976e40b29d2218fba0dd543d3885a7900eb37e2acef5c1532f587aa36c33529286d0ad73a2884fea40a63f4775b41c444eda47f2c0af72ffce796ad5aae3b210b6f3bc3962817a5e346437d791fdc59fcf75a46df97bac91571e6eab808269ea2f609f10b00194fbf616"], 0x18}}, 0x0) [ 1084.989077][ T4647] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1085.068359][ T4655] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1085.092473][ T4660] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:54 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 06:27:54 executing program 5: syslog(0x0, &(0x7f0000000000), 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r0, 0x8, r1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x30, 0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40c000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x5, 0xfffffffffffff390, 0x0, 0xfffffffffffffc00, 0x3, 0x101, 0xc32, 0x7, 0x10000, 0x5, 0x1, 0x101}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x80000000, 0x7, 0x6, 0x10000, 0x3}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x3, 0x2, [0x7, 0xfff]}, 0xc) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x800, 0x18000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000400)={0x2, &(0x7f00000002c0)=[{}, {}]}) sendto$inet6(r2, &(0x7f0000000440)="d6", 0x1, 0x40000, 0x0, 0x0) write(r0, &(0x7f0000000480)="54133f2b11ab7c4e74e92c02c68003b0b7cf3000fe515bebd763ef8491d09a43aa99d21d31ab6a5d9392d7039371a0f3c827e396dbf2cd534dece6061d", 0x3d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000004c0)=0x5, 0x4) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/226, 0xe2) r4 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = request_key(&(0x7f0000000700)='big_key\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)='\'selinux\x00', 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r4, &(0x7f00000006c0), 0x0, r5) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000880)={0xb7c5, &(0x7f00000007c0)="f35e786e9a0b8d5fde44305647b6356db2c5eb5273a9dca8ebe4a4c9b731a539e275db9ffc52c91a1f9331841f42f6ebdafbb9d8480232c1d7b66b82044a8de2acbbbe9d4178c719a2dfbebb1a6448a5f51d1228cef2d3e1cd9463af0fb9d6d4b7935ccb078776bdc49671bdf7fca4f270588d06589e3dfde7e8fb7b3055ad9369e0e7f4ba8abe6c51c123e8c9a72c41e7b214bb916344a93f232f22011c2176311113f67a027d54e2e7dc1c95aed1c7"}) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000008c0)={'bridge_slave_1\x00', @remote}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000900)) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000940)=0x63) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000980)={0x4, 0xa65, 0x2, 'queue1\x00', 0x1f}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000a40), 0x4) modify_ldt$read(0x0, &(0x7f0000000a80), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xc4, 0x1, {"0ffbfe5e9f75a1a29900305b48fb465830fe1e5d6390f62860cc2c0b35dd109d7029cd8ca9880d71de3a2018dc8e6893c842fc58f7a182b158291e4b26b10bccff8bdad6213dea1320467a115e3bf90c0d40fb5d1c7125a77003da9a2b83610ce7e1a9c7d9314b46961a39837c205aecb27bba98e1ac1eb114a2892f874af8e9f5b9465c01ddc07d6f86de96b8458ca281234c2c6b27cbaf772986f99e914bd302e5060c81c44af8ba"}}, {0x0, "33e2cdb46752618fad99a215e5ed052c6c176212c52399601ea53aa382bc692e284d523dcabbda8307a838c8df0010c7bb13a50e36d1242eb4e49686f41d43b331032e1d6bc0afd9f562b42c2442438dd995fa82645dd121eb585d5f513664213dcb76b82eeb005b972adf6d6770aa358524afb888ef426010886389ab47f93eccda94c4ba32f8fa542df7f62697227615f6781cfc44bba175c691ac0f11376e4fa26d674139b250c52995e7c7bc0c2a1edb156d9e46efb6d6fd18c4eec18f960c1e4bc558f7c2dd63a021347e076dd0a506806ae7ce5f3778362224e5"}}, &(0x7f0000000c80)=""/129, 0x1a3, 0x81}, 0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000d80)=@assoc_value={r3, 0x2}, &(0x7f0000000dc0)=0x8) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x1) 06:27:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1512e, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) 06:27:54 executing program 0: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x3312, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x2a18773235dc1bea) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 06:27:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/217, 0xb4}], 0x36) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8}, 0x10) ioctl$TIOCCBRK(r3, 0x5428) 06:27:54 executing program 5: socketpair$unix(0x1, 0x800000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000002c0)='./file0\x00', 0x103200, 0x101) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r4}) fcntl$lock(r3, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x2000000000}) r5 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x5, 0x82000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000200)={0xc}) dup2(r0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0xffffff96) fcntl$lock(r3, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xf08, 0x83, r6}) dup3(r0, r3, 0x0) [ 1085.687455][ T4674] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1085.713422][ T4679] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1512f, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1085.878655][ T4700] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x40001) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x700, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40084) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000200), 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000820000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000001020000"], 0x48}}, 0x0) 06:27:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15130, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1086.028561][ T4714] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1086.082951][ T4714] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:55 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 06:27:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x59) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) 06:27:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/193, 0xc1}], 0x8, &(0x7f0000000600)=""/181, 0xb5}, 0x40) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000700)={0x101, 0x6, 0xa000}, 0x4) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}], 0x2}}], 0x1, 0x0, 0x0) 06:27:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15131, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1000000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x20}}, 0x10) [ 1086.614798][ T4725] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15132, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:55 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getuid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 06:27:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000200)='\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000000)=ANY=[], 0xfffffffffffffd64) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, &(0x7f0000000dc0)='\x00') [ 1086.879803][ T4750] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:55 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d02001000000000000000000000000310d5274ca075a9c52d81fdcafd9ecc0006000020000002000000e0000001000000000000000008001200000002e2e8eba400000000000600000000000000000000000000000000850000000000000000000000000001ad1414ff030000000000000000000000030005000020000002000000e0000001000000000000000001bbc36591657b7a510ddb306a02e65b3e4f019ad4ca20755b4d967ac2e39b88c66c006ff15ba0eca80f42c63ec1c52e4b9fbca720d094c7512428b09364595e0a8362f4c79a207db7d87da07a1bcdf47bab711646f1e4bd6a"], 0x80}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x14800, 0x0) accept$nfc_llcp(r2, 0x0, &(0x7f00000001c0)) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000040)=""/29) 06:27:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15133, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1087.064619][ T4760] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:56 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind(r0, 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) accept4$netrom(r2, &(0x7f0000000040)={{0x3, @bcast}, [@null, @bcast, @rose, @rose, @null, @bcast, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x800) fcntl$setstatus(r2, 0x4, 0x0) 06:27:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)='G', 0x1}], 0x1) 06:27:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15134, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:56 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0xc01c, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0xa, &(0x7f0000000000)='/dev/vcs#\x00'}, 0x30) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/cgroup\x00') ioperm(0x3, 0x2, 0x5) open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x40) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xfe61, 0x8c400) r3 = openat(r2, &(0x7f0000000100)='.\x00', 0x0, 0x120) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000001c0)=""/171) 06:27:56 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 06:27:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 06:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:56 executing program 2: socketpair$unix(0x1, 0xffbffffffffffffa, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3e) ptrace$cont(0x18, r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xa8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:27:56 executing program 0: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r0, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfffffffffffffcf5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000080)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r4 = geteuid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r3, r4, r5}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:27:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15135, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:56 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000003bc0)='ns/cgroup\x00') setns(r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x440000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x30, 0x8, 0x80000000}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e23, 0xffffffff00000001, @mcast2, 0x1}}}, 0xfffffffffffffff2) 06:27:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:57 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 06:27:57 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80004000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000040)='eth0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000100)={'nr0\x00', 0x7}) syz_open_procfs(r3, &(0x7f00000000c0)='personality\x00') inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x17c) 06:27:57 executing program 5: r0 = msgget$private(0x0, 0x0) r1 = accept4$tipc(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xc23f, 0x40000) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x6c, 0x3, "30692d71863d4c337286cf449da9b38ee32dd975df720e69b6c5fffe8b6578114bfe887a804974af872c03c6ca4ba73e231f77f35f8736bf88cb0c9550ec1f089ca2961c9aec4448431ac5b5bbfa9f1d505df65bc2acc63c5b00140bec9904c916e2b0de"}, &(0x7f00000001c0), 0x1000) 06:27:57 executing program 0: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r0, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfffffffffffffcf5) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000080)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r4 = geteuid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r3, r4, r5}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15136, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xffffffffffff0001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) 06:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15137, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:57 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000000)=0x44) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00ffffffffac32e7258cd259aae01df0ffffffff04000000e5aed31a99495fee"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='\xdec\x80g\xbf5\xe2') write$cgroup_int(r1, &(0x7f00000000c0), 0x1802a140) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)="c7a929527865a3e985f0f2871235a99359d7b1b68f1159bc4159ae409f8c9b74914f45dc842058442df698169e342560a0059e", 0x33}], 0x0, 0x0) shutdown(r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000300)=@srh={0x0, 0x0, 0x4, 0x0, 0x7f, 0x8}, 0x8) 06:27:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000380)=ANY=[@ANYBLOB="6175746f5f6461416c6c6f633f000000448ff67265090069643d00", @ANYRESHEX]) 06:27:58 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 06:27:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15138, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fcc2"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendfile(r4, r3, &(0x7f0000000180), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="0fc79e0000008066ba410066edc4c2d9af246e660f38822e2e660f3882b87f0000000f209ab805000000b9e4c100000f01d90f00980b000000b805000000b9de1b00000f01c1ea060000002900", 0x4d}], 0x1, 0x1c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/90, 0x5a}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_GET_FP_MODE(0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) prctl$PR_GET_FP_MODE(0x2e) r5 = dup(0xffffffffffffffff) connect(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e20, 0x6, @loopback, 0xa}}}, 0x80) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000380)=0x68) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 06:27:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sysinfo(&(0x7f0000000200)=""/28) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, &(0x7f0000000100)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) read(r0, &(0x7f0000001100)=""/4096, 0x1000) sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00000000000000000000000000000000", 0x82, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = dup(r0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000240)) [ 1089.396232][ T4888] validate_nla: 5 callbacks suppressed [ 1089.396241][ T4888] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1089.535809][ T4899] __nla_parse: 19 callbacks suppressed [ 1089.535820][ T4899] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15139, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0xffffffffffffffd1, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=""/181}, &(0x7f0000000080)=0x78) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f00000000c0)=0xb, 0x4) ioctl(r1, 0x20000000008912, &(0x7f0000000040)) [ 1089.582636][ T4905] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:58 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='rose0\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 1089.692935][ T4909] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x6, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) 06:27:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1513a, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1089.782235][ T4916] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1089.813687][ T4918] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x100000001, 0x9, 0x9, 0xc23, 0x8, 0x8000, 0x20, 0x7, 0x6, 0x800, 0x81}, 0xb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x317, 0x0, 0x0, 0xffffff89) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde1) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x15be) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4000000) [ 1089.896392][ T4923] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:58 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 06:27:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000000000006) 06:27:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1513b, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20200, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r1, r2, 0xf, 0x2}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_names='\x00\x00@\x00'}) 06:27:58 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = dup(r0) ioctl$SIOCRSSCAUSE(r1, 0x8907, 0x0) [ 1090.306352][ T4938] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1090.320739][ T4943] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:27:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[0x0], 0x0, 0x0) 06:27:59 executing program 5: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 06:27:59 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfa70, 0x40100) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040)=""/125, &(0x7f00000000c0)=0x7d) clone(0x10020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:27:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1513c, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1090.398841][ T4948] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x6, 0x4c2d, 0x8001, '\x00', 0x6}, 0x0, [0x2, 0x4, 0x6, 0x9, 0x7, 0x5, 0xc744, 0x7f, 0x2, 0x1, 0xfffffffffffffff8, 0x8, 0x1, 0x6, 0x3f, 0x5, 0x400, 0x5, 0x100, 0x6, 0x3f, 0xd3dc, 0x8, 0x3, 0x6, 0x3ff, 0xffffffffffffffff, 0x9, 0x6, 0x5, 0x10001, 0xffffffffffff0001, 0x9, 0x56ca, 0x5, 0x0, 0x7, 0x4, 0xc742, 0x9, 0xea78, 0x1f, 0x0, 0x10000, 0x2, 0x10001, 0x3, 0x3, 0x0, 0x7, 0x7, 0x3, 0x7, 0xb688782, 0x3, 0x9, 0xfffffffffffffffd, 0x2, 0x7, 0x7, 0x9, 0x400, 0xfffffffffffffffb, 0x85a, 0x6, 0x10000, 0x8, 0x4239, 0x2, 0x1c, 0x800, 0x7, 0x4, 0x32, 0x3, 0xffff, 0x3, 0x2, 0x0, 0x18, 0x4, 0x0, 0x33, 0x9, 0x6, 0x7, 0x1000, 0xf5d, 0x2, 0x4, 0x5, 0x9, 0x6, 0x4, 0x8, 0x100000001, 0xc87, 0x8, 0x3f, 0x7fff, 0xff, 0x5e2, 0x3, 0x7, 0x836, 0x5, 0xf57, 0x7, 0x100000001, 0xf6f5, 0x2aba, 0x3ff, 0x1ff, 0x100000000, 0x4e, 0x7fff, 0x7, 0x2, 0x4, 0x4, 0x0, 0x1, 0x4, 0x7, 0x46a7, 0x101, 0x9, 0x9]}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0x101, 0x454f4847, 0x198c, 0x5}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xc4, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x4) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, &(0x7f00000001c0)) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2, 0x62, r3}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x800, 0x8000, 0x7}) fcntl$dupfd(r1, 0x0, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) [ 1090.551494][ T4962] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1090.641998][ T4970] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1090.674336][ T4970] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1090.686371][ T4969] IPVS: ftp: loaded support on port[0] = 21 [ 1090.997281][ T4969] IPVS: ftp: loaded support on port[0] = 21 06:27:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:27:59 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000680), 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000380)='./file0\x00'}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000640)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, 0x0, &(0x7f0000000240)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000180)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x20040, 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000c40)="df8481a7b289330904e020bd3c90409e74ec10fbb525418617cf20f092d1687d9d4dd907d008acd357b230a7f586fee041dee0ae0e2c5d7b7f9fc90209d98578d809809c36dd5482d6bdcc8de06ea00cf043078b", 0x54, 0x1}], 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7be7e09edef61c00855c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af4642109cc4965a2d8baa9f31a92c149e6cb208d567014e8c76d78eb40ade4691005ecf02404282d80000000000000000"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@initdev, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000880)=0x43e) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@ipv4={[], [], @multicast2}, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 06:27:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:27:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:27:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="00022abd7000fedbdf2576dfeef7276212000000180009000400020008000100070000000800010006000000340007000c00040000f8ffffffffffff0c0003000000000000000000080002000400000008000100030000000800010008000000"], 0x1}, 0x1, 0x0, 0x0, 0x40080}, 0x8800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x40, 0x1, 0x8, 0xffffffffffffffe0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x8) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x501000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10001) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4cc1, 0x100000001}, 0x2c) unshare(0x40600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000000), 0x0}, 0x18) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffbfffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r5, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000740)=0x0) syz_open_procfs(r6, &(0x7f0000000300)='net/llc\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=""/45, 0x2d}) creat(&(0x7f0000000400)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='1.7.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000004c0)=ANY=[@ANYBLOB="7480a500003d72646d612c706f72743d30783030303030303030303030305ec901862c72713d3078303030303030303030303030303030342c72713d3078303030303030303030303030303030302c736d61636b6673726f6f743d2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653002c726f6f74636f6e746578743d757365725f752c66736e616d653d272d47504c2c00"]) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 06:27:59 executing program 4 (fault-call:6 fault-nth:0): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1091.203921][ T4984] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) [ 1091.307924][ T4985] overlayfs: missing 'lowerdir' [ 1091.380534][ T4983] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1091.433871][ T4985] overlayfs: missing 'lowerdir' [ 1091.436454][ T4997] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x989680, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b40000000000000051000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 06:28:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1091.643906][ T5002] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf0ffff, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:00 executing program 0: r0 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) ioprio_get$uid(0x3, r1) 06:28:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) sendfile(r1, r3, 0x0, 0x80000002) 06:28:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="00022abd7000fedbdf2576dfeef7276212000000180009000400020008000100070000000800010006000000340007000c00040000f8ffffffffffff0c0003000000000000000000080002000400000008000100030000000800010008000000"], 0x1}, 0x1, 0x0, 0x0, 0x40080}, 0x8800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x40, 0x1, 0x8, 0xffffffffffffffe0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x8) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x501000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10001) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4cc1, 0x100000001}, 0x2c) unshare(0x40600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000000), 0x0}, 0x18) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffbfffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r5, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000740)=0x0) syz_open_procfs(r6, &(0x7f0000000300)='net/llc\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=""/45, 0x2d}) creat(&(0x7f0000000400)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='1.7.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000004c0)=ANY=[@ANYBLOB="7480a500003d72646d612c706f72743d30783030303030303030303030305ec901862c72713d3078303030303030303030303030303030342c72713d3078303030303030303030303030303030302c736d61636b6673726f6f743d2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653002c726f6f74636f6e746578743d757365725f752c66736e616d653d272d47504c2c00"]) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) [ 1092.080391][ T5019] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1092.113000][ T4990] FAULT_INJECTION: forcing a failure. [ 1092.113000][ T4990] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1092.192356][ T4990] CPU: 1 PID: 4990 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190301 #1 [ 1092.201319][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.211373][ T4990] Call Trace: [ 1092.214675][ T4990] dump_stack+0x172/0x1f0 [ 1092.219020][ T4990] should_fail.cold+0xa/0x15 [ 1092.223617][ T4990] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1092.229428][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.234899][ T4990] ? __lockdep_free_key_range+0x120/0x120 [ 1092.240629][ T4990] get_futex_key+0xba3/0x1660 [ 1092.245323][ T4990] ? unqueue_me_pi+0xc0/0xc0 [ 1092.249926][ T4990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1092.256172][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.261662][ T4990] futex_wake+0xf9/0x4d0 [ 1092.265914][ T4990] ? __lockdep_free_key_range+0x120/0x120 [ 1092.271704][ T4990] ? get_futex_key+0x1660/0x1660 [ 1092.276711][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.282224][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.287692][ T4990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1092.293971][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.299490][ T4990] do_futex+0x324/0x1df0 [ 1092.303746][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.309219][ T4990] ? perf_trace_lock+0xeb/0x510 [ 1092.314074][ T4990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1092.320319][ T4990] ? debug_smp_processor_id+0x3c/0x280 [ 1092.325795][ T4990] ? exit_robust_list+0x290/0x290 [ 1092.330828][ T4990] ? __might_fault+0x12b/0x1e0 [ 1092.335594][ T4990] ? find_held_lock+0x35/0x130 [ 1092.340361][ T4990] ? __might_fault+0x12b/0x1e0 [ 1092.345137][ T4990] ? lock_downgrade+0x880/0x880 [ 1092.350067][ T4990] mm_release+0x33d/0x490 [ 1092.354411][ T4990] do_exit+0x417/0x2fa0 [ 1092.358577][ T4990] ? get_signal+0x331/0x1d50 [ 1092.363173][ T4990] ? find_held_lock+0x35/0x130 [ 1092.367974][ T4990] ? mm_update_next_owner+0x640/0x640 [ 1092.373371][ T4990] ? kasan_check_write+0x14/0x20 [ 1092.378320][ T4990] ? _raw_spin_unlock_irq+0x28/0x90 [ 1092.383519][ T4990] ? get_signal+0x331/0x1d50 [ 1092.388114][ T4990] ? _raw_spin_unlock_irq+0x28/0x90 [ 1092.393332][ T4990] do_group_exit+0x135/0x370 [ 1092.397933][ T4990] get_signal+0x399/0x1d50 [ 1092.402356][ T4990] ? lock_downgrade+0x880/0x880 [ 1092.407223][ T4990] ? poll_select_copy_remaining+0x2c9/0x440 [ 1092.413261][ T4990] do_signal+0x87/0x1940 [ 1092.417522][ T4990] ? wait_for_completion+0x440/0x440 [ 1092.422823][ T4990] ? setup_sigcontext+0x7d0/0x7d0 [ 1092.427853][ T4990] ? __x64_sys_pselect6+0x332/0x480 [ 1092.433059][ T4990] ? __ia32_sys_select+0x150/0x150 [ 1092.438176][ T4990] ? ksys_write+0x166/0x1f0 [ 1092.442698][ T4990] ? exit_to_usermode_loop+0x43/0x2c0 [ 1092.448076][ T4990] ? do_syscall_64+0x52d/0x610 [ 1092.452843][ T4990] ? exit_to_usermode_loop+0x43/0x2c0 [ 1092.458227][ T4990] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1092.463521][ T4990] ? trace_hardirqs_on+0x67/0x230 [ 1092.468560][ T4990] exit_to_usermode_loop+0x244/0x2c0 [ 1092.473873][ T4990] do_syscall_64+0x52d/0x610 [ 1092.478471][ T4990] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1092.484364][ T4990] RIP: 0033:0x457e29 [ 1092.488277][ T4990] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1092.507882][ T4990] RSP: 002b:00007f2339a92c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1092.516297][ T4990] RAX: fffffffffffffdfe RBX: 00007f2339a92c90 RCX: 0000000000457e29 [ 1092.524270][ T4990] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 1092.532244][ T4990] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.540223][ T4990] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f2339a936d4 [ 1092.548198][ T4990] R13: 00000000004c4967 R14: 00000000004d8270 R15: 0000000000000009 06:28:01 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) sendfile(r1, r3, 0x0, 0x80000002) 06:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1092.773576][ T5042] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$KDDISABIO(r2, 0x4b37) sendfile(r1, r3, 0x0, 0x80000002) 06:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000001140)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2000000000, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vcsa(0x0, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000005380)) getitimer(0x3, &(0x7f0000000300)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 06:28:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="00022abd7000fedbdf2576dfeef7276212000000180009000400020008000100070000000800010006000000340007000c00040000f8ffffffffffff0c0003000000000000000000080002000400000008000100030000000800010008000000"], 0x1}, 0x1, 0x0, 0x0, 0x40080}, 0x8800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x40, 0x1, 0x8, 0xffffffffffffffe0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x8) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x501000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x10001) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4cc1, 0x100000001}, 0x2c) unshare(0x40600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000000), 0x0}, 0x18) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffbfffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r5, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000740)=0x0) syz_open_procfs(r6, &(0x7f0000000300)='net/llc\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=""/45, 0x2d}) creat(&(0x7f0000000400)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='1.7.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000004c0)=ANY=[@ANYBLOB="7480a500003d72646d612c706f72743d30783030303030303030303030305ec901862c72713d3078303030303030303030303030303030342c72713d3078303030303030303030303030303030302c736d61636b6673726f6f743d2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653002c726f6f74636f6e746578743d757365725f752c66736e616d653d272d47504c2c00"]) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 06:28:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) [ 1093.227378][ T5063] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:02 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:02 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x7) r1 = msgget(0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x490000, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000180)=0x200) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/107) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r3 = socket(0x100000010, 0x3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x707000, 0x0, @fr_pvc=0x0}}) 06:28:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) 06:28:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) 06:28:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) 06:28:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) [ 1094.203513][ T5105] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 06:28:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:03 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 1094.508280][ T5127] validate_nla: 2 callbacks suppressed [ 1094.508288][ T5127] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) [ 1094.634416][ T5128] __nla_parse: 14 callbacks suppressed [ 1094.634425][ T5128] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x9, 0x3, 0x48, &(0x7f0000ffa000/0x2000)=nil, 0x5}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x5, 0x70, 0x80000000, 0xff, 0x6, 0x717, 0x0, 0x8, 0x800, 0x4, 0x1, 0x101, 0x2, 0x5, 0x9, 0xffffffffffffff7f, 0x7f, 0x44f6, 0x5, 0x2, 0x400, 0x940d, 0x20000000000000, 0x2, 0x1f, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x1ff, 0x1, 0x9, 0x33afd03b, 0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x4}, 0x1100, 0xffffffff, 0x0, 0x0, 0x4, 0x2125, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) 06:28:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) 06:28:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1094.866272][ T5147] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) [ 1094.967494][ T5155] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1095.044633][ T5155] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:04 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x80000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x80}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@uid_lt={'uid<', r2}}, {@subj_user={'subj_user', 0x3d, '}keyringeth0vboxnet0ppp1wlan0^system(em0'}}]}}) 06:28:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) 06:28:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1095.503938][ T5174] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:04 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x40002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 06:28:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x80000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x80}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@uid_lt={'uid<', r2}}, {@subj_user={'subj_user', 0x3d, '}keyringeth0vboxnet0ppp1wlan0^system(em0'}}]}}) [ 1095.613891][ T5180] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1095.666686][ T5180] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x4510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:04 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x40002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 06:28:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x80000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x80}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@uid_lt={'uid<', r2}}, {@subj_user={'subj_user', 0x3d, '}keyringeth0vboxnet0ppp1wlan0^system(em0'}}]}}) [ 1095.810183][ T5191] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:04 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:04 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x40002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 06:28:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x80000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x80}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@uid_lt={'uid<', r2}}, {@subj_user={'subj_user', 0x3d, '}keyringeth0vboxnet0ppp1wlan0^system(em0'}}]}}) 06:28:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1096.355611][ T5208] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:05 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@empty}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) [ 1096.490156][ T5214] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1096.535782][ T5221] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:05 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@empty}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) [ 1096.695603][ T5227] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:05 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x300}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:05 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1097.333794][ T5241] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:06 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:06 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x40002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) [ 1097.450357][ T5240] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1097.497435][ T5252] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x6510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:06 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1097.631174][ T5259] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1097.769281][ T5265] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:06 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x900}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:06 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x40002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 06:28:06 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1097.990926][ T5279] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:06 executing program 0: write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r0, 0x40002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 06:28:06 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xcd31, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:06 executing program 0: write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x7510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1098.335364][ T5300] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:07 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:07 executing program 0: write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:07 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:07 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x8510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:07 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:08 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x400000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:08 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:08 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1100.121693][ T5347] validate_nla: 2 callbacks suppressed [ 1100.121701][ T5347] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1100.208779][ T5353] __nla_parse: 9 callbacks suppressed [ 1100.208788][ T5353] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x9510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:08 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) 06:28:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1100.303951][ T5359] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:09 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1100.426124][ T5368] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1100.575789][ T5374] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1100.614598][ T5375] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:09 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) 06:28:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:09 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1100.797911][ T5386] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) 06:28:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1100.872644][ T5388] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1100.902787][ T5394] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xa510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:09 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1101.088153][ T5403] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1101.199250][ T5410] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1101.228793][ T5410] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:10 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:10 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xb510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1101.431238][ T5420] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) [ 1101.485282][ T5421] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xc000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1101.575400][ T5433] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:10 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1101.748033][ T5440] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:10 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:10 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0), 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xc510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1102.240751][ T5456] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0), 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xd000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0), 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) [ 1102.526672][ T5478] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:11 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xd510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(0x0, 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1102.961622][ T5494] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(0x0, 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xe000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1103.170663][ T5511] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(0x0, 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:12 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:12 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0), 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xe510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xf510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:12 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0), 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:13 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:13 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0), 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x0) sendfile(r1, r2, 0x0, 0x80000002) 06:28:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x0) sendfile(r1, r2, 0x0, 0x80000002) 06:28:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:13 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x0, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x10510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x0) sendfile(r1, r2, 0x0, 0x80000002) 06:28:13 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfffffffe}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:13 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x0, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000002) 06:28:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x11510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:13 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x0, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000002) 06:28:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x12510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000002) [ 1105.274049][ T5613] validate_nla: 5 callbacks suppressed [ 1105.274058][ T5613] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1105.406305][ T5622] __nla_parse: 18 callbacks suppressed [ 1105.406316][ T5622] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1105.477756][ T5622] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:14 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) 06:28:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) 06:28:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x13510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1105.766220][ T5631] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) 06:28:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1105.862872][ T5640] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) 06:28:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x14510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1105.913341][ T5640] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) 06:28:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1106.013015][ T5648] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1106.147359][ T5657] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1106.181501][ T5657] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:15 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x40000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x0) 06:28:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) 06:28:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x15510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x0) 06:28:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 1106.539036][ T5671] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1106.625737][ T5675] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x16510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x0) [ 1106.692645][ T5675] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1106.785501][ T5685] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:15 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x17510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 06:28:15 executing program 2 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) [ 1107.143108][ T5703] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 1107.185284][ T5704] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, 0x0, 0x0) [ 1107.280249][ T5712] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x18510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:16 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x8000000f) [ 1107.485086][ T5721] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:16 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, 0x0, 0x0) 06:28:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000010) 06:28:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x19510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:16 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000140)={0xc, 0x2, 0xfffffffffffffffb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) rt_sigprocmask(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x398) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000000c0)=0x880) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x5, 0x401, 0x0, 0x100000000000000, 0x5, 0x7}) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r2, r3, 0x0, 0x80000002) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x1, 0x100, [], &(0x7f00000001c0)=0x1ff}) [ 1107.887527][ T5735] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:16 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, 0x0, 0x0) 06:28:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x2, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1a510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1108.338309][ T5757] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:17 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) fcntl$setflags(r2, 0x2, 0x1) 06:28:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1b510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x5421, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:17 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000), 0x0) 06:28:17 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000), 0x0) [ 1108.795389][ T5776] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x5450, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) fcntl$setlease(r3, 0x400, 0x3) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)={0x6, 0x0, [{0x54b3, 0x3, 0x0, 0x0, @msi={0x5, 0x3, 0x4f}}, {0x4, 0x4, 0x0, 0x0, @msi={0xd4, 0x7ff, 0x9}}, {0x80000000, 0x2, 0x0, 0x0, @adapter={0x4, 0x200, 0x2000000000, 0x6, 0x5}}, {0xfff, 0x2, 0x0, 0x0, @msi={0xc3fd, 0xca, 0xb47}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x8, 0xda96, 0x7, 0x8}}, {0x5, 0x2, 0x0, 0x0, @msi={0x33b, 0xd39b, 0x3}}]}) 06:28:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:17 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000), 0x0) 06:28:18 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x5451, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1d510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:18 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 06:28:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x5452, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c4, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1fe, @ipv4={[], [], @multicast1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x8000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf1e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendfile(r1, r3, 0x0, 0x80000002) 06:28:18 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 06:28:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1e510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x5460, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:18 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='wchan\x00') openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000240)=0x7) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40002) epoll_wait(r2, &(0x7f0000000200)=[{}, {}], 0x2, 0xfffffffffffffffb) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x100000001, 0x0, 0x0, 0x200}, {0x3ff, 0xfffffffffffffff8, 0x20, 0xfffffffffffffffc}, {0x800, 0x8, 0xbfc2, 0x9}]}) sendfile(r4, r4, 0x0, 0x80000002) rt_sigprocmask(0x2, &(0x7f0000000180)={0xfffffffffffffffa}, 0x0, 0x8) memfd_create(&(0x7f00000001c0)='\x00', 0x2) 06:28:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:18 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 06:28:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x40049409, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1f000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x18510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1110.361463][ T5860] validate_nla: 3 callbacks suppressed [ 1110.361473][ T5860] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x40200) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x60) dup(r1) sendfile(r1, r3, 0x0, 0x80000002) 06:28:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x4020940d, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1110.553700][ T5871] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 06:28:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1f510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xfffffffffffff2df, 0x3, [0x4791, 0x0, 0x8]}, &(0x7f00000000c0)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) sendfile(r1, r2, 0x0, 0x80000006) [ 1110.716046][ T5876] __nla_parse: 13 callbacks suppressed [ 1110.716057][ T5876] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1110.795324][ T5882] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1110.911403][ T5886] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:19 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x8010aa01, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:19 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r1, 0x1, 0x40, r2}) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x6) recvfrom$rxrpc(r2, &(0x7f00000000c0)=""/68, 0x44, 0x63, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x9, 0x1, 0xc6, 0x7, 0x2, 0x1, 0xfffffffffffffa6d, 0x6f8, 0x7fff, 0x7fff}) 06:28:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1111.190064][ T5896] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:19 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x0, 0xfd, &(0x7f00000000c0)="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"}) ftruncate(r1, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0x8010aa02, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1111.285277][ T5908] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1111.324129][ T5908] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:20 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x3}], 0x1) [ 1111.401547][ T5915] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1111.509025][ T5924] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1111.560144][ T5928] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc0045878, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4380000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40002) sendfile(r1, r4, 0x0, 0x80000002) 06:28:20 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x21510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:20 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) 06:28:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1111.856615][ T5938] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x80000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x11, 0xc, "e73632a9e01268d25607e6555befe92471ba4e62c439f7c5e7f6a381e28a7bfa7f57a4b23af002f123a2d383acad2a4b9cd825fc1467a0679d39d71c9a9fe54c", "121b81fbdd41f6b60359b210ef74440a7d99c24a68ee7e87b59ee3c97e6f62d2caa8987f5ead02d3e644d46637cbd39da61e9b6c6a09107b9ed75f9a51e4cc17", "c23eb14cce99bbc89f487b52ff78a6e57778d5680b2d924218e778698615219f", [0x101, 0x3]}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:20 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x40000108}], 0x1) 06:28:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc0045878, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1111.958880][ T5949] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1111.992705][ T5949] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x22510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:20 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x7ffff000}], 0x1) 06:28:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc0189436, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) [ 1112.217247][ T5964] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1112.358832][ T5974] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1112.437954][ T5977] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x230f0000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc018aa3f, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:21 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x2) 06:28:21 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7}) 06:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020660b, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x7fffffff) ioctl$TIOCNOTTY(r2, 0x5422) [ 1112.745922][ T5990] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:21 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x8) 06:28:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x23510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40002) sendfile(r0, r1, 0x0, 0x80000002) 06:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1112.973542][ T6009] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:21 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x300) 06:28:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:22 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x24510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x8000, 0x8000, 0x6, 0x81, 0x0, 0x3, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x7, @remote, 0x8dc}}, 0x5, 0x3b94, 0x6, 0x2e01, 0x1}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0xfffffffffffffff8, 0x1, 0x200, 0xf43b, 0x4000, 0x7, 0xfffffffffffffffe, 0x3f, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000480)={r3, 0x3, 0x658f4a46, 0x80000001, 0x8000, 0x7, 0x7, 0x4a, {r4, @in6={{0xa, 0x4e22, 0x9, @local, 0x7ff}}, 0x4, 0x2, 0x2, 0x100000001, 0x7}}, &(0x7f0000000540)=0xb0) r5 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r5, 0x40002) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3, 0xa481}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x8001}, &(0x7f0000000240)=0x90) sendfile(r1, r5, 0x0, 0x80000002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x200, @tick=0x3ff, 0x6, {0xfffffffffffffffc, 0x6}, 0x6f26, 0x3, 0x1}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000280)={0x20, 0x9, 0x20}) 06:28:22 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0x2, 0xfff}) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xdf}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1, r2}) 06:28:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x7fffdffee000}, 0x1}) 06:28:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x9, &(0x7f00000009c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xff, r3, &(0x7f0000000100)="781c00ccbe20f4ea5048cd1694f5392205e2575aad58dc1e42659cff48937c1af6bc7f8cbb5b3a03244738d9d4a9336c683224e7ab6ba6950650b4b04c6bc9067c1d0fa222a209654873fd1bc9f63dfbed9916f31c2f448a58730cef7bf14d6b09089d60c114f1809878680e6b7431032496e9eca844c11cb298f1773322e33d8c2e55747319ad33e7f8f373b4bcbc307f4d67fd5b141e096ca938e66c33584607e7e3ea18238619ac87213312516ca2", 0xb0, 0x938, 0x0, 0x3, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xffffffff, r3, &(0x7f0000000300)="f3a9b695b635264fa080d2058d5f29c04709bdae1d9a692bdf5e4a9a69a15b124f5508e0609432e5052311f729a57e1c10c03dc4602507268912b950d3c5f9125a755e746080092d746ef3f4f29b94a7f015f98fbdaed4ddff95831c0fdfd01e78cd394e2b3230ef903ae442645a67a96d7f5f4acdea042b01e6e555c6499aded21f1b6e1bf1980d23253dee3b0d9009962101a1b6e0870f404e6c1d4124721dee908f97a7f7a08ad4a7bbc2bbc4411167a04dff0ac8ee3e800e10ece9e8e2cff706c9f87fb60d1b7e7bd44cf7e08fdb550f927b9b25b6929bb4fb3fa938bfef3d124a11585cce6be8d73505088c84d45ac8f0901bbeb132", 0xf8, 0x7, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000400)="8b4f815293fd32adc51bbb483b02ade261e1cfd7bdadb1578859ef5dd461a02496d67f9756afa97ee9295dc6c685aab0230fadb3f097273b1fb720e2143724c8473bab0d56644d09660b7e012640ca50737b329a680ed3126d2504d0ad24996c979a0e2639489ec27bc819e14856ddaad17503d9887feab7053e659aab914010586c3a6623b71a771041efe7644379dec0f846230e88e1e93738e0f2aaaaecc99bcc3fd963a950ef2f24f665f9130bf4951118a3eecd7ad9f26605f17119a9d35dc7290b3748721247e47aa5cf71", 0xce, 0x9, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x80, r3, &(0x7f0000000500)="030cb2adcd56a2a92b2514c5b21ecec1936739b294ebff877fa9d235e51da632ecec77d8f8f8b939ff308af4cd039f33532533fc0e69f00acfff1efadb41cff5c81e29465ee5f8d4096a7e1dffd40da939bf307745d689edbdf94db7e9af148ccaccdafd6d8b4c8d286ada6890ccc50be4eee7eadca711f8b2a93db3c8375325b504fa01c97f144a4a40c867fae42aa2851a3ed0d89b8deb41cfbd7cfe51c0100906a1906299aed417ab0d12a4e8e0fc5ed2368c94d545b992a4f1c8085659c0", 0xc0, 0x1, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x10001, r1, &(0x7f00000005c0)="108c88c4c5f6d44c307536ad1fd8ee10c6d113f5b78d03d911ee34e76c1dd02fedde96ce34327aa9de3517082a4a3f8a0d0e03177a9b0bd7b0ba170ffca78116d58a8be6efc0b06a7a5bcba0b2c4c072b5c467879d8e8a946d343fdac3b3bc40b17e657d90ca7952c83fd508aa7eb09c98e65939e8f790ddfc0491906e974bf35b35b96b228358a17602c15e1df61e40ece498582a7ec01e49c0d62ff624d907c8b8c650c9bab464bfaa0a3196a3260cb5c6da9bd08061d5c3f3c92af2c4c1abb04c353d4d7d8b8c25137cee759de165f734d24edc3c6fef", 0xd8, 0x8, 0x0, 0x1, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0xb7c3, r0, &(0x7f0000000700)="0bf2f418b309687e637815bac3032e4ee272c599738b287e8927ef6a509ce030ff5cf8044bec46ee0fbf53543fafd3edfdb11261f3d86c204c107ad9d9a8319a730cdd532e24472c21af389e19029829933efaa42a940a750298f22f7e5de9ae19cce7b2ec6e13852c6990e4f49b6d7c36500cab137cea8d040f0c3fd9bbf76d6501f2a715a6de36cdec719fa59906073e993a08221857438d660d87c36e6c000e82df211fd4f7433b9c502cd85c705022", 0xb1, 0x4, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000800)="1cd4d3f020f9b67935df2e71e729c6d26be46f7cad83230779491e6133d725b16d30c40fcfbc6888fd187cfc89a3e556b1f30fae992359d027f0fec958da4e20feb982545158311f3d3f587b7062628e1b9bd401d407e9705e0668310827cf4937f970f12d42caad310fb059feebd7f0bcb126", 0x73, 0xdb, 0x0, 0x2}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000008c0)="e46edef9859491fbf3e13166adc8cec76bb797badba97fb74323df8366fc5ce99a8deb743d3061f7e952fb801062fbdffae9075e34fdebd6a8ef29e70fdf27", 0x3f, 0x7ca, 0x0, 0x2, r2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x5, 0x401, r2, &(0x7f0000000940)="ecc087bc04ad51159460f9ffdbb6a62e5d540e7eb93a758bc06a7c8dd78474fe09c77283bc740b022e0dd8178a93753a70bedf7e74ba2ea09edb9f", 0x3b, 0x10000, 0x0, 0x1, r2}]) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) [ 1113.791637][ T6044] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:22 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x100000000}], 0x1c) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x25510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x80ffff}) 06:28:23 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000180)={0x0, 0xfff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x80000000}, 0x8) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80800) dup2(r3, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40002) sendfile(r0, r4, 0x0, 0x80000002) 06:28:23 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x8, &(0x7f00000000c0)='}cgroup\x00'}, 0x30) setpriority(0x1, r1, 0x7) 06:28:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x1000000}) 06:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x26510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:23 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000000240)="847e514e193d1c4c145ae35dd748e4ba70b77528ba57cd53685e74b7eca85819b45e3905dfb3b259489055c61c57782cdf8bcc81ae7d13ef71626b8108d4958ce71e3a0674d18240968ac80a4035511ebb5efad19a8d6d415385807e051bd957f9addff1179d33a1f1ecee9a2199059fd89780166cf78e18cab7082577a48c3f32402eafabe5", &(0x7f0000000300)=""/71}, 0x18) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) flock(r0, 0x5) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000140)={0x6, 0x9, 0x7ff}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000003c0)={0x0, @reserved}) syncfs(r0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @remote, @rand_addr=0x100}, 0xc) 06:28:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r0, r2, 0x0, 0x84000002) 06:28:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0xffff8000}) 06:28:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x27510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:24 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:24 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000000000a0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e22, @rand_addr=0x5}}) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) r4 = getpgid(0x0) ptrace$peekuser(0x3, r4, 0x6) fcntl$dupfd(r2, 0x406, r2) 06:28:24 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x80ffff00000000}) 06:28:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x28510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:24 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x100000000000000}) [ 1115.827670][ T6132] validate_nla: 4 callbacks suppressed [ 1115.827681][ T6132] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f0000000300)={0x50, 0x7d, 0x1, {{0x0, 0x37, 0x6, 0x8, {0x73, 0x0, 0x5}, 0x2080000, 0x3, 0x6, 0x20, 0x1, '\x00', 0x1, '\x00', 0x1, '+', 0x1, '\x00'}, 0x4, '/GPL', r4, r5, r6}}, 0x50) sendfile(r1, r3, 0x0, 0x80000002) 06:28:24 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x9fffd, 0x0) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x4, 0x4, @thr={&(0x7f0000000100)="7bbef906fae922d2671b8d7d796585b46831be5b9cdcf9e8dca3ec7f9f32b952d5f83125de8f4c3f6b4ffbe3d8ecb5bc20759efa46e4e38e9e8dedd37c2b2d598882c1789eb2d92d46b3410d4d111ac43ee7aeaf278175ce11a3757d1b2d7679c495b7c03695f7d36a02c915444f4b4c5265304edd9d42b432d33d6337e95d0e73e0", &(0x7f00000001c0)="68505e09c92be1fd2030a448f5030f2a5184a7418216a9b1220fdaa583c5049f47e48c3920dee2d0e54f05c197441553ba409a9f18ae913c54b8eac81020b7c3767e8462648789dd9744737d6427157660ea6eb1bc4eb649a291cf8482dfad2eaef26ee461fb168d985953c78c20fc3ee041ee94ca8e99f3ac9b13c30cc76f31327d892fab9c204f64af03e74dc09afa7688a82b3b81b7a0a8f4f2fa34f3235c21a3824e6b74686b3f4898acec40e239321832d157a20ded869494fe9658dd31948969b63fa24287e552a61c60a071e58370b54d4cb2f1513a8a2accda9871d4bba93c920b1f399984b4faf815"}}, &(0x7f0000000300)=0x0) timer_gettime(r1, &(0x7f0000000340)) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x6, 0xa3f44571cc2b393a) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1115.917003][ T6140] __nla_parse: 16 callbacks suppressed [ 1115.917014][ T6140] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x29510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:24 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x1) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x7fff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1116.145861][ T6159] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:25 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:25 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) dup3(r0, r0, 0x80000) 06:28:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0xffffff3f) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) fcntl$setsig(r1, 0xa, 0x5) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000000c0)={0x3a, "3ff206626b4c55a8dc82e041c161f241378bfd18dbdbddf5f4148337ebbbf156f68a2f04fe5c40b1e241b4944f40478ab050f636e2c0f16df1eaa6750f739869adb56db0d6282dfbb9bbc968c7c7102019549b6c378c26b0f7d25fd8bfc568175d27d6a83949122ca403a017386126e6140977d30a952f7394fb160c83f9ad7a"}) ftruncate(r0, 0x2000010001) tee(r2, r0, 0x6, 0xa) pipe(&(0x7f0000000180)) mlockall(0x2) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') ioctl$RTC_AIE_OFF(r2, 0x7002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xb, @capture={0x1000, 0x1, {0x3}, 0xfffffffffffffe01, 0x5}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) finit_module(r0, &(0x7f0000000040)='wlan1[security\x00', 0x2) accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x1, 0x4) 06:28:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2a510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1116.815973][ T6171] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x7, 0x81, 0x8000, @dev={[], 0x14}, 'batadv0\x00'}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0xfffffffffffffff9, 0x0, 0x14, &(0x7f0000ff9000/0x2000)=nil, 0x1f}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) 06:28:25 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)=""/3) socket$rds(0x15, 0x5, 0x0) [ 1116.906736][ T6182] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x280000, 0x801) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x10000, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000000c0)={r2, 0x1f8}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x3}) 06:28:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2b510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1116.958791][ T6182] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:25 executing program 2: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [], @loopback}, 0x2}}, 0x58bef5e0, 0x6, 0x5, 0x4c, 0x4}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x101}, &(0x7f0000000200)=0x11d) r5 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x160, r6, 0x102, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa32}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x5) ftruncate(r5, 0x40002) sendfile(r2, r5, 0x0, 0x80000002) [ 1117.103786][ T6197] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1117.236010][ T6203] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1117.270240][ T6205] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:26 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KDDISABIO(r1, 0x4b37) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4502, 0x0) r3 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18000010}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2e0, 0x13, 0xe, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x3}, [@generic="9c95264edae37e8298752108d213252e731520945bd243cd4cf1c846ec1b52cb0ae1ae21452deb2432aa86f53ee77bfb2b01dd5add0c504a115043cecd4958bcb8e94e8156fd3f05ce20a88442c28f4d7f2c0f90ee99dd3119d55c83e207fcd6b4903c876940660e0b1456790871c90c6e3d2e9faf8887c6009967e84166758ddc6bcab1df43eefc97955483c7f27a24fd2634943f3f532d0b9e724bd8f9014163efb7dd06c1373a3485f89587f177f15866301ddce544b5c7ae157ca540d6fff2a105ff6628e357e01e7b9916f71ae4bb39db76a593419e24675e7ed353ec335e7c767c9b998a4efae26d", @typed={0x24, 0x61, @binary="2efed03d9deffc229851af51005b681e54e542e7eab82a70ab82383b928bd86e"}, @nested={0x16c, 0x6d, [@typed={0x8, 0x31, @pid=r3}, @generic="6f1482506000ef9dd23fe847fcb070841f61af4f8409d966b165dc6d51617333c416f28f96b461cdec2f00995d539da9635c6103166b0432c89ffee416a2f77c14c145c7e1f16fd9e904b83baa9b3df4f0d22b98999f698af62ec9900946997567d1a59af07f2796ae9048b1d8c78e1a04ac0f76d80e0fcc49e3fb4fd2dbb5ae66db620c76699c03e60b9ecba112036c9290a7eacab9456d09e4eb1f32f46578b833b06b529a3ae6f5bf2d86954db46379d8983204914c90b329fd9a454ccf233db8885c08bcb65ab588c443353c4cefee691e8825ff80f35408", @generic="8479baf2d3b81a2eb72b00cabd60019af6a62fef1a77c5bceafb63a44f5160fc8679420a214e88057c77de2c36cfb2247bc9a529f17de21f7954e20db237c603ea653c3c5e24e4424f2850514dfa02bc2c45f2b55d8c139769c787fc6044202eb925e177af4d2949038656fdd380ad065bcfe3a0476ccbbd20d8ebd51506969588a7", @generic='\"']}, @typed={0xc, 0x2e, @u64=0x8}, @generic="f24e1f3241b6e42dbc5842c7606c4c1d826bf9bb150ba2fe7437d63c1c1bbc72efb9857fdb66105449cc6b509a8a3393290ed30c1f", @typed={0x8, 0x2e, @u32=0xfffffffffffffff7}, @typed={0x8, 0x2f, @pid=r4}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 06:28:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) clock_gettime(0xfffffffffffffffd, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00') ioctl$VIDIOC_QUERYBUF(0xffffffffffffff9c, 0xc0585609, &(0x7f0000000100)={0xfff, 0x7, 0x4, 0x0, {r2, r3/1000+30000}, {0x7, 0x8, 0x7, 0x9, 0xfffffffffffffffb, 0x100000001, "0cc7e5a5"}, 0x8, 0x1, @offset=0x15, 0x4}) 06:28:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x400100, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000340)={r3, 0x2, &(0x7f0000000200)=[0x1, 0x9], &(0x7f0000000240)=[0x7, 0x1, 0x8000], 0x23, 0x5, 0x5, &(0x7f0000000280)=[0x100000000, 0x5, 0x9, 0x5, 0x4], &(0x7f0000000300)=[0x9, 0x8000, 0x9, 0x85, 0x8]}) r4 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r5 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r5, 0x40002) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) splice(r4, &(0x7f00000000c0)=0x61, r0, &(0x7f0000000100)=0xfffffffffffffffe, 0x9, 0x100f) sendfile(r1, r5, 0x0, 0x80000002) 06:28:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2c510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1117.822743][ T6212] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x4f) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xffffffffffffffff, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000100)) 06:28:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x6) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) [ 1117.883345][ T6220] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/8, 0xffffffffffffff71}], 0x1) ioctl$FICLONE(r0, 0x40049409, r0) [ 1117.974441][ T6227] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2d510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)=ANY=[@ANYBLOB="030067003eb4de4576acdf0fe777a1cac889470540c7a9b42854d0facc73685812865e1afcd3c007a1174cb5d6c7d9a4ce3ef77ab9ae49f51975cf217929f0114290dd74bc84623574ec40137ac19696e5669e149c8b9903a793fa6eca066b44dd0a961054e03cb0b06131"]) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) fallocate(r1, 0x10, 0x71, 0x2) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1118.207585][ T6243] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1118.301416][ T6250] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1118.351496][ T6250] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:27 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r0, 0x100) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7f3e, 0x603) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) 06:28:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) shmget(0x3, 0x3000, 0x602, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000100)=""/233, 0x8}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x11c0a92}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x90}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) 06:28:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="63f4a8ea400613651d4b1e464bf829cc", 0x10) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r3, r3, 0x0, 0x80000000) fcntl$setflags(r2, 0x2, 0x1) 06:28:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2e510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1118.871242][ T6260] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000000c0)={0x80000000000eed5}, 0x0, 0xfffffe3a) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r3}) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40002) sendfile(r1, r4, 0x0, 0x80000002) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)={0x3, 0xf, 0x4, 0x48, {0x77359400}, {0x5, 0x0, 0xfb, 0x81, 0x800, 0x3f, "fdf3a5c4"}, 0xf2bc, 0x0, @fd=r2, 0x4}) 06:28:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x7ffd, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x48000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000000c0)={0xffffffff00000000, 0x0, 0x77c}) 06:28:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x2f510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) [ 1118.970257][ T6270] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0xc000, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x202000) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40002) sendfile(r1, r4, 0x0, 0x80000002) syz_init_net_socket$rose(0xb, 0x5, 0x0) 06:28:27 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r1, r2) [ 1119.139646][ T6285] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:28 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x400000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) tkill(r2, 0x1c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x30510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {0xfffffffffffffff9}}], 0x30) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0xffffffffffff7fff, 0x8}}) [ 1119.896382][ T6299] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/231) 06:28:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)="3e182b5c41f7dfa2bdbfc07db8a46c364f81e1897400da7de8cdd8c9e773438f50d99628d151b5f4ed16736ab5339654121cd24660b4b8068832400e9ef1f079aae741ad7eeb3b20761d95d5d3bd8f81d5d1ef79b47d6c62a6655059706bf303", 0x60, r1}, 0x68) ftruncate(r2, 0x40002) sendfile(r1, r1, 0x0, 0xddc6) 06:28:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x31510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0xfffffffffffffffd) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) 06:28:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) ppoll(&(0x7f0000000040)=[{r3}, {r1}, {r3}, {r1, 0x2}, {r3, 0x4}, {r2, 0x1}], 0x6, &(0x7f00000000c0), &(0x7f0000000100)={0x6000000000000}, 0x8) sendfile(r1, r3, 0x0, 0x1ff) [ 1120.159114][ T6327] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:29 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4002, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x2) 06:28:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x8000) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\xb1 ', 0x0) ftruncate(r2, 0x40002) sendfile(r1, r2, 0x0, 0x80000002) 06:28:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100)=0x3, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_int(r0, 0x0, 0x2f, &(0x7f0000000080)=0x8, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x248900, 0x0) 06:28:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x32510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1120.935685][ T6345] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x40002) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000002) 06:28:29 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x101, 0x500) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r2 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0xf9, 0x9, r1, 0x0, r2, 0x0, 0xffff, 0x3}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, r3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r4, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) 06:28:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0xffffffffffffffff) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1121.025093][ T6355] __nla_parse: 5 callbacks suppressed [ 1121.025103][ T6355] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x33510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1121.097437][ T6348] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x7, 0x6}) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x228300) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x9, 0x400, 0x1, 0xfffffffffffffbff, 0x3}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x400000000000015a, &(0x7f00000000c0)=[{0xfffffffffffff44c, 0x6}, {0x4, 0x2}, {0x4, 0x9}]}) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ftruncate(r4, 0x40002) sendfile(r1, r4, 0x0, 0x80000002) 06:28:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1121.178629][ T6369] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1121.309613][ T6379] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1121.351874][ T6380] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @rand_addr="34c5f3a4e783b844e1a2efb2464a5a74", 0x101}, 0x1c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:30 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80200, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0xa0001, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:30 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x34510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002980)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) r1 = open(&(0x7f0000002c80)='./file1\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x2}, &(0x7f0000002c40)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000029c0)={0x0, 0x9, 0x8, 'queue1\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0xf01}, {&(0x7f00000002c0)}, {&(0x7f0000002380)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r6, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000002b80)={0x62, @local, 0x4e23, 0x10002, 'Po\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x94\xd9\x8a', 0x1, 0x6, 0x4b}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, r4, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) r7 = gettid() setpgid(r7, r7) read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c) [ 1121.926961][ T6391] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) fsync(r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xfc7d70642a9a9ffd, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x7, 0x1, [], &(0x7f0000000080)={0xbf091f, 0x4, [], @ptr=0x1}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:30 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) [ 1121.983683][ T6394] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x35510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1122.120303][ T6413] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 1122.122933][ T6405] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:30 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000002c0)=0xc) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x100000001, 0x48103) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r1, 0x0, 0xff, &(0x7f0000000300)='vboxnet0}\x00\x9a\xe3\fn\xf0\xddb/{\xac\xc7\xf6\xf0\x1cA\x80T\x8fDG\xdd\x0e\xde\x7f\x00\xf7Yy\x1dU\x16\xb1H\x9c`,?\x82\x86$\xcc11-\xf5\xffW\xd23\xab\xe3\xf02\fKn\xba\x95L\xd3\x9e8\xb1^\x84^R\x03k\x17T2\xd1J\xd3\x1aQ\xb1X\xc2\xaf\xea\xda1\x84p\xca\xb0G\xbcF\xcc\x8f\xb6bn\x83i\xc3e\xbb\xe1\x87[4\x1b\x985\xd6C\xeaR\xf8d\xb1\xd2\xa0\xbd\xf0A\x88\xd1\xc8\x12\x14q\x88k\xb3\xa1\xc5\xebsy:\xb6+\x97\xbe\x19\xf2V3\xa1\xd5\x928\xce%g\xeb7\x18\a\x90\xc3\xb5\b)\x04\x11\xf6 \xc4.\x13\xf8\x8fI\xa8x\xf0\xa2\\\x92(\x90s\xdf$e$[%\xc4\x87\xaa\xc6\x1f\xb0\xca]\xff\x9f\"\x87\xb3\xfd\xff\r\x10\xcb\xdf6\\7V\xd9\xadhL\x9d\xdd\xb1)\x10\xc6\x1a\x94\xbddY\xe9\x04\xdfU5 :]tI# [_\\\xec\x83\x14\xfeZS\xe0\xa1', r2}, 0x30) setsockopt$inet6_buf(r1, 0x29, 0xd2, &(0x7f0000000140)="aa39ba6e6e23a36d64485c44fdeea61cdfd9e99ac834ac7e6c788d4319", 0x1d) r3 = getpgrp(0xffffffffffffffff) r4 = getpgrp(r3) ioprio_set$pid(0x3, r4, 0xffffffffdb4d9ad7) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r5, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000000c0)) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1122.209604][ T6417] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = userfaultfd(0x0) mknod(&(0x7f0000000380)='./file0\x00', 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x490000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xfffff00800000001}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) faccessat(r4, &(0x7f0000000280)='./file0\x00', 0x11, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) fcntl$getownex(r4, 0x10, &(0x7f0000000300)={0x0, 0x0}) write$cgroup_pid(r3, &(0x7f0000000340)=r6, 0x12) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) ioprio_get$pid(0x5423e30d57d0f54f, r7) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r5, 0x7, 0x101}, 0xc) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xebe, 0x40) ioctl$DRM_IOCTL_AGP_INFO(r8, 0x80386433, &(0x7f0000000080)=""/59) 06:28:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffffc}, 0x0, 0x8) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x41) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000000c0)) [ 1122.341414][ T6424] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1122.415452][ T6428] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:31 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x36510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x200000000000032, r0, 0x0) mprotect(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x8) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x10) ftruncate(r0, 0x8000) 06:28:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x87, "24458c05a4a0f6f0f143b0ba4f8ac4690a4b23997a1454bf758007e94e01c54dd3397fe8076a2b56db06c504dd954539ce97e9ee24ab414a58cbd13a051144b783ce516f102290a2f9acc9f87b184adf39bfef4756824f633a6fe1fcc2d9f3cb1c8ab4b772ff1426260a9e337150a835639866608079dee823e5c32a6b82437dfbd6c5dcb4ec84"}, &(0x7f0000000040)=0x8f) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r4, 0x80000000}, &(0x7f00000001c0)=0x8) ftruncate(r1, 0x40001) sendfile(r1, r3, 0x0, 0x80000002) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000200)=0x7f, 0x4) [ 1122.919158][ T6445] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x337, 0x2, 0xfffffffffffffc01, 0xffff, 0x8, @broadcast}, 0x10) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {0x0, 0x100000000}}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) ioprio_get$uid(0x3, r2) r3 = dup2(r1, r0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000300)=r3) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={[], 0x3}, 0xe, 'teql0\x00'}) r4 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r4, 0x40002) sendfile(r1, r4, 0x0, 0x80000002) 06:28:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0)={0x2, 0x10001}, 0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 1123.025675][ T6457] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x37510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) [ 1123.087787][ T6457] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. 06:28:31 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) clock_gettime(0x1000000000100000, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r5 = semget$private(0x0, 0x6, 0x18) r6 = semget(0x0, 0x3, 0x8) semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000300)=""/73) write$sndseq(r0, &(0x7f0000000180)=[{0x6, 0x10000, 0x9, 0x5, @tick=0xfce, {0x1}, {0x5e5e9206, 0x6}, @raw8={"fc10b8783b052789410551d9"}}, {0x2, 0x5, 0x1000, 0x100000000, @time={r1, r2+30000000}, {0x80000000, 0x3}, {0x5000000, 0x4e1c}, @control={0x1, 0xfffffffffffffffd, 0x9}}, {0x4, 0x1000, 0x4d53, 0x0, @tick=0x1, {0x1c2, 0x20a}, {0x5, 0xfffffffffffff0ce}, @connect={{0x1000, 0xffffffffffffffff}, {0x3ff, 0x9}}}, {0x0, 0x3b95, 0x11, 0x3, @tick=0x4, {0x800, 0x3f}, {0xffffffffffffff4d, 0x1}, @quote={{0x5, 0x4}, 0x5, &(0x7f0000000100)={0x1, 0x2, 0x81, 0xffffffffffffff5e, @tick=0x3d6a5be8, {0x8, 0x81}, {0x98, 0x101}, @addr={0x1, 0x1}}}}, {0x9, 0xfffffffffffffffe, 0x120, 0x400, @tick=0x3ff, {0x1000, 0x8001}, {0x100000000, 0xfffffffffffffffe}, @raw32={[0xff, 0xcbe, 0x8]}}, {0x200, 0xffffffffffffffff, 0x81, 0x3, @tick=0x1ff, {0x9, 0x7}, {0x1, 0x6}, @result={0x0, 0x2}}, {0x44cb000, 0x9ca5, 0x44, 0x100000000, @time={r3, r4+30000000}, {0x0, 0x1}, {0x8, 0x5}, @note={0x7, 0x1c, 0x5373, 0x100000000, 0x10000}}], 0x150) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) semctl$GETZCNT(r6, 0x0, 0xf, &(0x7f0000000380)=""/97) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 06:28:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400403, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000080)={0x0, 0x5, 0xf63, {0x77359400}, 0x865, 0x6}) [ 1123.207301][ T6471] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:32 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 06:28:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) fchmod(r1, 0x18) rt_sigprocmask(0x200000000, &(0x7f00000001c0)={0xfffffffffffffff8}, 0x0, 0x116) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x80000000000) ftruncate(r3, 0x40002) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x5, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}}, 0x20008080) sendfile(r1, r0, 0x0, 0x80000004) 06:28:32 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) getpgrp(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r1, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) 06:28:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x38080000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1123.960231][ T6490] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)="77329760ee69aa73cee809f5f9326767cea0babd32ae8a193ca99fb5192010c12e588cdd3e2b44b7b0d3a75d15052ee8ac674f98b8f5f7eaeacc00f69925fabc5e285efc68af25cbdc61d5652b2f067ea2c689a40358814264a46c386a7ee569f794c6a42bfdf83d10b2d0660a0e852a5d1072a31a5208ed5fd2e9f9a83508859062cc4c7b57607c9d80565807490cbff95f9829b305e4ae23bc") fstatfs(r0, &(0x7f0000000180)=""/232) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x3) ftruncate(r3, 0x40002) sendfile(r1, r3, 0x0, 0x80000002) 06:28:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) 06:28:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x38510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:32 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8294, 0x40000) recvfrom$inet(r2, &(0x7f0000000080)=""/4, 0x4, 0x20, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 06:28:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1124.240288][ T6515] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:28:33 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:28:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) rt_sigprocmask(0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x40003) sendfile(r3, r1, 0x0, 0xfffffffffffffffe) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x7fffffff) 06:28:33 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x8, @rand_addr="0d8c5201d2e9a4ded0148d59485f54b7", 0x8}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @broadcast}], 0x4c) 06:28:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000000f000/0x4000)=nil, 0x4000}, 0x3}) 06:28:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x39510100, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x6}]}}}]}, 0x3c}}, 0x0) 06:28:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) [ 1124.972366][ T6531] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1124.984067][ T6531] WARNING: CPU: 1 PID: 6531 at kernel/locking/lockdep.c:1024 lockdep_register_key+0x10d/0x490 [ 1124.985464][ T3876] kobject: 'loop4' (000000004d6797d0): kobject_uevent_env [ 1124.994333][ T6531] Kernel panic - not syncing: panic_on_warn set ... [ 1125.008049][ T6531] CPU: 1 PID: 6531 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190301 #1 [ 1125.012567][ T3876] kobject: 'loop4' (000000004d6797d0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1125.016997][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.017002][ T6531] Call Trace: [ 1125.017022][ T6531] dump_stack+0x172/0x1f0 [ 1125.017036][ T6531] ? lockdep_register_key+0x40/0x490 [ 1125.017051][ T6531] panic+0x2cb/0x65c [ 1125.017065][ T6531] ? __warn_printk+0xf3/0xf3 [ 1125.017080][ T6531] ? lockdep_register_key+0x10d/0x490 [ 1125.017094][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:28:33 executing program 0: r0 = syz_open_dev$media(&(0x7f0000001040)='/dev/media#\x00', 0x91c1, 0x1) mq_timedsend(r0, &(0x7f0000001080)="4fc142da5c57200e24f4991569f01766772c00b47a091f3ba637414ba7d3040af0f782e1d53e1afa64c53377534681be9a9b40c855250a3e658d743bcaf5ba4efff9d6ba3bedd3901835595ad7a8fac3e5ce1075d47f9cde428456c12024c16b20cce43b5a62de078dc8a92b7b4f7ce90edb56a65a723cf4bebd9541e60f2c7abbc798994bfa012646fb4992ea235b614bbd3102cc2d2c612b4d1284cb3795c65e", 0xa1, 0x101, &(0x7f0000001140)={0x77359400}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x420000, 0x0) timerfd_gettime(r1, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x141, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3, @ipv4={[], [], @multicast1}, 0x400}, r2}}, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) getdents(r1, &(0x7f0000000f00)=""/205, 0xcd) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000b40)={0x8, "b33be6d92ff432eb4e22086540a75817d011babb297a7da871251c08e2612128", 0x2, 0x4, 0x80000001, 0x11, 0x3}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001240)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000001340)=0xe8) setfsuid(r4) write$sndseq(r1, &(0x7f000086afd0), 0x3dd) bind$inet(r1, &(0x7f0000000e80)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x1000000000000000, 0x26383910, 0xaf}, &(0x7f0000000200)=0x10) socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000e40)=r5, 0xe5) write(r3, &(0x7f00000011c0)="250e7c5662b96296c1cae1e92550a57c3e55739c32ae23d9dbc41a00bb81411f3622cc635b9de1f6b5b54372482efca88cafdb3718cee9507befa7ae3683975824730c43d2fb", 0x46) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001380), 0x106, 0x100f}}, 0x20) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000180)={'bcsh0\x00', {0x2, 0x4e22, @loopback}}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/8, 0x20000088}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001000)={r5, 0xfffffffffffffffe, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4520fc15470008e0fa88c6000300"], &(0x7f0000000e00)=0xe) sendmsg$rds(r1, &(0x7f0000000d00)={&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/216, 0xd8}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="480000000000000014010000010000000600000004000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8100000000000000", @ANYPTR=&(0x7f0000000d40)=ANY=[@ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='u\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="b700000000000000", @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="9125e11793f4fd61dc9b5134c2cbb100000f000ffd00", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="9400000000000000"], @ANYBLOB="050000000000000004000000000000000100000001000000580000000000000014010000060000000500000004000000", @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYBLOB="0000008000000000"], @ANYPTR=&(0x7f0000000c00)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="010000000000000000000000000000000500000000000000060000000000000000000000000000000700000000000000"], 0xa0, 0x8801}, 0x20000000) read$eventfd(r1, &(0x7f0000000ec0), 0x8) [ 1125.017107][ T6531] ? __warn.cold+0x5/0x45 [ 1125.017120][ T6531] ? lockdep_register_key+0x10d/0x490 [ 1125.017132][ T6531] __warn.cold+0x20/0x45 [ 1125.017151][ T6531] ? lockdep_register_key+0x10d/0x490 [ 1125.089543][ T6531] report_bug+0x263/0x2b0 [ 1125.093880][ T6531] do_error_trap+0x11b/0x200 [ 1125.098476][ T6531] do_invalid_op+0x37/0x50 [ 1125.102873][ T6531] ? lockdep_register_key+0x10d/0x490 [ 1125.108257][ T6531] invalid_op+0x14/0x20 [ 1125.112409][ T6531] RIP: 0010:lockdep_register_key+0x10d/0x490 [ 1125.118403][ T6531] Code: 75 23 e9 e5 01 00 00 48 89 da 48 c1 ea 03 42 80 3c 3a 00 0f 85 b1 02 00 00 48 8b 1b 48 85 db 0f 84 c7 01 00 00 4c 39 e3 75 dd <0f> 0b 48 c7 c0 f8 55 5e 89 48 ba 00 00 00 00 00 fc ff df 48 89 c1 [ 1125.138001][ T6531] RSP: 0018:ffff88801f826f28 EFLAGS: 00010046 [ 1125.144074][ T6531] RAX: dffffc0000000000 RBX: ffff888094548458 RCX: 1ffffffff12bcabf [ 1125.152026][ T6531] RDX: 1ffffffff146765e RSI: 0000000000000000 RDI: ffff8880537f2e3c [ 1125.160000][ T6531] RBP: ffff88801f826f58 R08: ffffffff8a33b2f0 R09: ffffed1003f04dda [ 1125.167967][ T6531] R10: ffffed1003f04dd9 R11: 0000000000000003 R12: ffff888094548458 [ 1125.175977][ T6531] R13: 000000000000018a R14: 0000000000000286 R15: dffffc0000000000 [ 1125.183951][ T6531] ? lockdep_register_key+0x91/0x490 [ 1125.189228][ T6531] alloc_workqueue+0x427/0xe70 [ 1125.193978][ T6531] ? bond_init+0x17a/0x800 [ 1125.198377][ T6531] ? find_held_lock+0x35/0x130 [ 1125.203127][ T6531] ? bond_init+0x17a/0x800 [ 1125.207540][ T6531] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1125.213251][ T6531] ? lock_downgrade+0x880/0x880 [ 1125.218106][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1125.224341][ T6531] bond_init+0x1b3/0x800 [ 1125.228570][ T6531] ? bond_set_rx_mode+0x4c0/0x4c0 [ 1125.233579][ T6531] register_netdevice+0x300/0xff0 [ 1125.238591][ T6531] ? netdev_change_features+0xb0/0xb0 [ 1125.243976][ T6531] bond_newlink+0x4b/0x90 [ 1125.248299][ T6531] ? bond_changelink+0x1ac0/0x1ac0 [ 1125.253407][ T6531] __rtnl_newlink+0x107b/0x16c0 [ 1125.258256][ T6531] ? rtnl_link_unregister+0x250/0x250 [ 1125.263666][ T6531] ? lock_downgrade+0x880/0x880 [ 1125.268498][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1125.274727][ T6531] ? is_bpf_text_address+0xd3/0x170 [ 1125.279917][ T6531] ? kernel_text_address+0x73/0xf0 [ 1125.285014][ T6531] ? __kernel_text_address+0xd/0x40 [ 1125.290206][ T6531] ? unwind_get_return_address+0x61/0xa0 [ 1125.295842][ T6531] ? __save_stack_trace+0x8a/0xf0 [ 1125.300851][ T6531] ? save_stack+0xa9/0xd0 [ 1125.305178][ T6531] ? save_stack+0x45/0xd0 [ 1125.309505][ T6531] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1125.315300][ T6531] ? kasan_kmalloc+0x9/0x10 [ 1125.319802][ T6531] ? kmem_cache_alloc_trace+0x151/0x760 [ 1125.325335][ T6531] ? rtnl_newlink+0x4b/0xa0 [ 1125.329844][ T6531] ? rtnetlink_rcv_msg+0x465/0xb00 [ 1125.335011][ T6531] rtnl_newlink+0x69/0xa0 [ 1125.339342][ T6531] ? __rtnl_newlink+0x16c0/0x16c0 [ 1125.344367][ T6531] rtnetlink_rcv_msg+0x465/0xb00 [ 1125.349295][ T6531] ? rtnetlink_put_metrics+0x560/0x560 [ 1125.354747][ T6531] ? __lockdep_free_key_range+0x120/0x120 [ 1125.360458][ T6531] ? netdev_pick_tx+0x300/0x300 [ 1125.365300][ T6531] ? netlink_deliver_tap+0x22d/0xc00 [ 1125.370566][ T6531] ? find_held_lock+0x35/0x130 [ 1125.375312][ T6531] netlink_rcv_skb+0x17a/0x460 [ 1125.380074][ T6531] ? rtnetlink_put_metrics+0x560/0x560 [ 1125.385514][ T6531] ? netlink_ack+0xb50/0xb50 [ 1125.390085][ T6531] ? kasan_check_read+0x11/0x20 [ 1125.394922][ T6531] ? netlink_deliver_tap+0x254/0xc00 [ 1125.400203][ T6531] rtnetlink_rcv+0x1d/0x30 [ 1125.404636][ T6531] netlink_unicast+0x536/0x720 [ 1125.409429][ T6531] ? netlink_attachskb+0x770/0x770 [ 1125.414537][ T6531] ? _copy_from_iter_full+0x259/0x8f0 [ 1125.419898][ T6531] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1125.425615][ T6531] ? __check_object_size+0x3d/0x42f [ 1125.430815][ T6531] netlink_sendmsg+0x8ae/0xd70 [ 1125.435561][ T6531] ? netlink_unicast+0x720/0x720 [ 1125.440476][ T6531] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1125.446002][ T6531] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1125.451477][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1125.457695][ T6531] ? security_socket_sendmsg+0x93/0xc0 [ 1125.463182][ T6531] ? netlink_unicast+0x720/0x720 [ 1125.468109][ T6531] sock_sendmsg+0xdd/0x130 [ 1125.472520][ T6531] ___sys_sendmsg+0x806/0x930 [ 1125.477193][ T6531] ? copy_msghdr_from_user+0x430/0x430 [ 1125.482652][ T6531] ? kasan_check_read+0x11/0x20 [ 1125.487494][ T6531] ? __fget+0x381/0x550 [ 1125.491640][ T6531] ? ksys_dup3+0x3e0/0x3e0 [ 1125.496058][ T6531] ? lock_downgrade+0x880/0x880 [ 1125.500916][ T6531] ? __fget_light+0x1a9/0x230 [ 1125.505596][ T6531] ? __fdget+0x1b/0x20 [ 1125.509657][ T6531] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1125.515892][ T6531] __sys_sendmsg+0x105/0x1d0 [ 1125.520503][ T6531] ? __ia32_sys_shutdown+0x80/0x80 [ 1125.525608][ T6531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1125.531053][ T6531] ? do_syscall_64+0x26/0x610 [ 1125.535736][ T6531] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1125.541784][ T6531] ? do_syscall_64+0x26/0x610 [ 1125.546442][ T6531] __x64_sys_sendmsg+0x78/0xb0 [ 1125.551199][ T6531] do_syscall_64+0x103/0x610 [ 1125.555832][ T6531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1125.561752][ T6531] RIP: 0033:0x457e29 [ 1125.565645][ T6531] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1125.585248][ T6531] RSP: 002b:00007fc03ca0cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.593655][ T6531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1125.601613][ T6531] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1125.609580][ T6531] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1125.617549][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc03ca0d6d4 [ 1125.625525][ T6531] R13: 00000000004c54d4 R14: 00000000004d93b0 R15: 00000000ffffffff [ 1125.634497][ T6531] Kernel Offset: disabled [ 1125.638813][ T6531] Rebooting in 86400 seconds..