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", 0x2000, &(0x7f0000002dc0)={&(0x7f00000001c0)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x80000000, 0x1000000, 0x401, 0x6, 0x2, 0x20}}, &(0x7f0000000100)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000002280)={0x18, 0x0, 0x523, {0x7}}, &(0x7f00000022c0)={0x18, 0x0, 0x47e, {0x6}}, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0xcfad, {0x5}}, &(0x7f0000002340)={0x28, 0x0, 0x4, {{0x932, 0x4}}}, &(0x7f0000002380)={0x60, 0xfffffffffffffffe, 0x7fffffff, {{0x2, 0x5, 0x34d, 0x1c00, 0xfffffffffffffffb, 0x941, 0x10000, 0xa75}}}, &(0x7f0000002400)={0x18, 0x0, 0x5, {0x20}}, &(0x7f0000002440)={0x17, 0x0, 0x0, {'-}/-^-\x00'}}, &(0x7f0000002480)={0x20, 0xfffffffffffffffe, 0x3b8, {0x0, 0xc}}, &(0x7f0000002580)={0x78, 0xffffffffffffffda, 0x6b, {0x1, 0x8, 0x0, {0x5, 0x6, 0x10000, 0x7, 0x7, 0x3, 0x3, 0x0, 0x0, 0xc000, 0x10001, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f0000002600)={0x90, 0x0, 0x7, {0x2, 0x3, 0x800, 0x9, 0x70b263ed, 0x0, {0x6, 0x3def, 0x100, 0x328b3eca, 0x7fff, 0x80000001, 0x400, 0x4fc8, 0x81, 0x8000, 0x7, 0x0, 0x0, 0x5, 0x4430}}}, &(0x7f00000026c0)={0xf0, 0x0, 0x6, [{0x6, 0x200, 0x8, 0x101, 'group_id'}, {0x1, 0x40, 0x2, 0x67, '\x04('}, {0x3, 0x3, 0x8, 0x5, 'rootmode'}, {0x1, 0x4d81, 0x0, 0x800008}, {0x5, 0x2, 0x2, 0xff, 'fd'}, {0x2, 0x0, 0x9, 0x3, '}@@:5g\\+)'}, {0x6, 0x0, 0x8, 0x5d183b7c, 'rootmode'}]}, &(0x7f0000002a00)={0x290, 0xfffffffffffffff5, 0xd37, [{{0x4, 0x2, 0x0, 0x5, 0x3ff, 0x8, {0x5, 0x6, 0x9, 0x400, 0x100, 0x7, 0xbd, 0x5, 0x5, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x3}}, {0x3, 0x3c, 0x1, 0x8001, '$'}}, {{0x3, 0x0, 0x40, 0x5, 0x2, 0x6, {0x0, 0x7, 0x9, 0x5, 0x0, 0x0, 0xc1e8, 0x4, 0x0, 0x6000, 0x8, 0x0, 0x0, 0x3}}, {0x4, 0xff, 0x2, 0x6, 'fd'}}, {{0x6, 0x1, 0x1, 0x8, 0x6, 0x0, {0x4, 0x9b, 0x5, 0x5, 0x4, 0x5, 0xebaa, 0x6b8, 0x1, 0xa000, 0x8, r2, r4, 0x7, 0x1006}}, {0x1, 0x8, 0x7, 0x7, 'user_id'}}, {{0x0, 0x0, 0x6, 0x5, 0xb2, 0x0, {0x2, 0x1f, 0x80000001, 0x6, 0x8, 0x7fff, 0x6, 0xffffffff, 0x7f, 0x6000, 0x1ff, 0xffffffffffffffff, r5, 0xe02c, 0x81}}, {0x4, 0x0, 0x8, 0x1f, 'rootmode'}}]}, &(0x7f0000002cc0)={0xa0, 0x0, 0xfffffffffffffffe, {{0x3, 0x37, 0x5, 0x80000001, 0x5, 0x9, {0x3, 0x8003, 0x1000000200, 0x8000, 0x2, 0x76, 0xc07, 0x5, 0x80000001, 0xa000, 0x0, 0xffffffffffffffff, r7, 0x8, 0x864d}}, {0x0, 0x8}}}, &(0x7f0000002d80)={0x20, 0xfffffffffffffffe, 0x7, {0x1, 0x4, 0x4, 0x2}}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140100c0520b8800000900000000000000"], 0x14}}, 0x0) write$binfmt_misc(r9, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) splice(r8, 0x0, r10, 0x0, 0x4ffe0, 0x0) 14:39:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8001, 0xffff}]}, 0xc, 0x3) pread64(r2, &(0x7f0000000000)=""/17, 0x11, 0x103f00) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x4) 14:39:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0xf39, 0x4, 0x1, "3009a266f8a66b77805f901fbddf5fb3e6f5e1194885e70a07dffee7d56d2aaa", 0x49433553}) [ 444.429498][T10765] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 444.444517][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan19: link becomes ready 14:39:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getegid() fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r3, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000000000)=""/8, 0x8, 0x1000) 14:39:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 444.964043][T10776] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 444.978828][T10776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan20: link becomes ready 14:39:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x74, 0x0, &(0x7f0000000340)=[@enter_looper, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/185, 0xb9, 0x1, 0x1a}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x400}, @register_looper, @acquire_done={0x40106309, 0x1}], 0x62, 0x0, &(0x7f00000003c0)="f433cf6daeb524c4e32322e934f64ee71d9cc82568fe807da12debb083621bd510865d6b83e8e7c5e79497973666b00a7db5a5594097c9b04ea7db83b9f623f2e298631696871d41dcb85498748893f5fdab2d23a25ebfae29e8198c8fdbbef629d3"}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, &(0x7f0000000240)={{{@in=@dev, @in6=@rand_addr=' \x01\x00'}, {}, {0x0, 0x0, 0x100000000000000}}, {{@in6=@loopback}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) 14:39:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) pread64(0xffffffffffffffff, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) fchdir(0xffffffffffffffff) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000340)={0x1ff, "057c850c33a8291d75df56a74148f75eb8f7617aa6f1c7364b6a449c1f6cc249", 0x800, 0x7, 0x10000, 0x10, 0x3}) r1 = gettid() ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f00000003c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80000000300010b000000000000000005000007240016400000000660d1000300000007fffffff70000000900fcff070000000100000b4d20001700000000040000010000008b4a000000a9000000040000000480000009980044800c000280050001009c0000002c00018014000300fe80000000000000000000000000002814000400fc0100000000000000000000000000002c000180140003000000000000000000000000000000000014000400fc0200000000000000000000000000080c0002800500010094000000060003400002000014000180080001007f00000108000200000000000600034000030000a499154000000003"], 0xf8}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getregs(0xe, r1, 0x8000, &(0x7f0000000000)=""/183) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f00000000c0)=""/8, 0x8, 0x103f00) 14:39:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') [ 445.653865][T10792] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 445.668483][T10792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan21: link becomes ready 14:39:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:16 executing program 2: io_setup(0x1, &(0x7f0000000140)=0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c4}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x9, 0x7, 0x40, @private2, @empty, 0x8000, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x6, 0xa7, 0x10, @local, @empty, 0x40, 0x8, 0x0, 0x8001}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104000000000000000000eeffff3ec90258dd4b4eeb4c83b6e9061650990cb68af1aeddd7346c841c0631ea4bc7b130785592ece5f29e17c8bb8b6ad4d73047417c2581d5a52cf79e583f5df4baa9920f280d3094c21a570a5b3bf1fb5ee4b8f83a3a1ecfb6846d87b8b66f5900ac389724a532544b658c4245c28745e825afa5e8267d3f9f0922", @ANYRES32=r8, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r9, 0x0, r10) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}}, 0x400c090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xec, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40008c0}, 0x2404c001) pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000200)=""/112) io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000340)="855003883f7e23c2c3a43835e8e9aedf", 0x20000350}]) 14:39:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 14:39:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000019240), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f0000000000)="5ac1eef9232174267ede0d8fbe06442194f130302e82384009746eb3ddb982f1282ce0610012a2dccc7165493223ebc6b800c013d0", &(0x7f0000000040)=""/58, &(0x7f0000000080)="41b916ea898dfcf3929e2f61a2312ddd207d35b55e137ab6f4c9b196cdc18269839e766d440a20225372e6c1ebf54fbbccdbfc1c4fdd5085d0996a055c060ad236bf59d04e04091dc18cc8faf3728bb2375ac782c1fd1838f4d1c57cc40280864df5ca93c10db2c5572e5be53f1c8611e8d9a093f9a77a47fab1d1ee310f611590a750ae285475e7bd0727de60924b41d29ec1dec820dc25286bee06e2f6c45b3309c982acc0", &(0x7f00000191c0)="d1283cdb6be0d77627929503584bd0fe2b248156f6c2330e7a1f88df28b921f1c31288b70f6c1226d4da272ded711a5a50a3c68c30c0db67ba16bef1251861370ef5bb4c5ba44a1f458d7bcbbb637a6491c1135abace271c", 0x0, r4, 0x4}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f00000001c0)=""/102400, 0x19000, 0x8) [ 446.257731][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.287956][T10805] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 446.333631][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan22: link becomes ready [ 446.346038][T10807] PF_BRIDGE: br_mdb_parse() with non-bridge [ 446.398127][T10807] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.409295][T10804] PF_BRIDGE: br_mdb_parse() with invalid ifindex 14:39:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pread64(r2, &(0x7f0000e3e000)=""/8, 0x8, 0x103f02) 14:39:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 446.945974][T10818] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 446.960571][T10818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan23: link becomes ready 14:39:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0xffffffffffffffff, 0x3b) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)=""/125, &(0x7f0000000080)=0x7d) pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x420800, 0x0) fstat(r4, &(0x7f0000000100)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 14:39:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) dup2(r0, r4) [ 447.548916][T10831] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 447.565371][T10831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan24: link becomes ready 14:39:17 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xd, {0x9, 0x5, 0xe3e, 0x1}}) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000080)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0xfff}, &(0x7f0000000140)=0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xf, 0xa, 0x4, 0x40, 0x8, {0x77359400}, {0x3, 0x1, 0x9, 0xde, 0x5, 0x5, "98b07b75"}, 0x0, 0x2, @planes=&(0x7f00000001c0)={0x80000001, 0x8, @mem_offset=0x7c8c, 0x3}, 0x73, 0x0, 0xffffffffffffffff}) recvmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, &(0x7f0000000440)=""/137, 0x89}, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000540)={0x7, {0x7, 0x2, 0x7}}) r4 = pidfd_getfd(r2, r2, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f00000015c0)={&(0x7f0000000580), &(0x7f00000005c0)=""/4096, 0x1000}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001600)='/dev/dlm-control\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001640)=@sack_info={0x0, 0x8001}, 0xc) r6 = creat(&(0x7f0000001680)='./file0\x00', 0x2) ioctl$RTC_UIE_ON(r6, 0x7003) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000016c0)={r1, 0x8000, 0x51, "97b585aa7ed78f894845287e2c2912184a94ff1ecba07dbaee1a89852cc36488c94b441aebaf16731ef9c58082f459c1a2dd21f5ba2117d445787ac1048a22368bc54254d71b5c199a56ef043fd26d4ccd"}, 0x59) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000001740)={'vxcan1\x00', 0x9}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) setfsgid(0xffffffffffffffff) 14:39:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000011) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000000)=0xfd) socket(0xa, 0x0, 0x0) pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:39:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) sched_getscheduler(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0xa, 0x13, 0x12, 0x10, 0x8, 0x3, 0x2, 0x57, 0x1}}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) r4 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @start={0x80000000, 0x1}}) pread64(r5, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 448.366055][T10842] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 448.381130][T10842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan25: link becomes ready 14:39:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r0, 0xffffffffffffffff) 14:39:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0xfff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xb00, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x6}, &(0x7f0000000080)=0x8) [ 448.963588][T10852] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 448.978310][T10852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan26: link becomes ready 14:39:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r0, 0xffffffffffffffff) 14:39:19 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000000c0)) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x20, 0xe, 0x69, {0x69, 0x6, "e535d845f7c59ff23d8c70bb4df016f7010f874ae8fc3f186f72aec08be96ea62ef6d55428718a9ba2b864009700e5c5c87c815245228f001181186e93f7a4b27eb6d05cf80541551c6167c87625b71f4c3b000204436053d4e64021590ac8af6dce42d90f7c32"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x31, 0x8c, "8a53ad127f5f656e2ea90eb86431a63c1d737cbe1aacd1b875b8f89364d4c5e1b9a553e0cf9db79b9a234fdae48c76e0556c2dd9c0bba8e121275af4f94153e66747acf597a82b9f816010ee7724615da0426ea3b0690a9c007b8a941249f792c894b665d95d29bd169328bbc82da40f3d6f9b86f60ffcd219ad287d057dd7e444a6cbb5c6c9c724aa97c3cc"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x401, 0x7ff, 0xfff, 0x81, 0x0, 0x0, 0x6, 0x3f, 0x8001, 0x3d7b, 0x1, 0x7f}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x100}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) add_key$fscrypt_provisioning(&(0x7f0000000500)='fscrypt-provisioning\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)={0x1, 0x0, "030be2af6686141b22b893aa6394b403"}, 0x18, 0xffffffffffffffff) 14:39:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/sctp\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 449.633576][T10865] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 449.655909][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan27: link becomes ready [ 451.373379][T10883] IPVS: ftp: loaded support on port[0] = 21 [ 451.816796][T10883] chnl_net:caif_netlink_parms(): no params data found [ 452.000724][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.011462][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.021449][T10883] device bridge_slave_0 entered promiscuous mode [ 452.053975][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.061621][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.076871][T10883] device bridge_slave_1 entered promiscuous mode [ 452.141753][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.161866][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.221008][T10883] team0: Port device team_slave_0 added [ 452.236708][T10883] team0: Port device team_slave_1 added [ 452.295767][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.303839][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.329982][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.356895][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.364856][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.391983][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.471022][T10883] device hsr_slave_0 entered promiscuous mode [ 452.482554][T10883] device hsr_slave_1 entered promiscuous mode [ 452.502330][T10883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.511274][T10883] Cannot create hsr debugfs directory [ 452.877458][T10883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 452.912094][T10883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.948175][T10883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.966354][T10883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.247359][ T8719] Bluetooth: hci4: command 0x0409 tx timeout [ 453.323011][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.362327][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.371623][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.403710][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.429323][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.440355][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.449731][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.458130][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.478471][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.524162][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.536207][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.545730][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.553109][ T8729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.562347][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.626387][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.637761][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.648268][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.658788][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.669484][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.699970][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.710441][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.720041][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.751790][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.761756][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.785281][T10883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 453.863083][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.871664][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 453.915152][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.977770][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.988298][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 454.056210][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 454.067582][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 454.091995][T10883] device veth0_vlan entered promiscuous mode [ 454.102619][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 454.111787][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 454.147653][T10883] device veth1_vlan entered promiscuous mode [ 454.228671][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 454.239559][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 454.249913][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.259998][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.285207][T10883] device veth0_macvtap entered promiscuous mode [ 454.307294][T10883] device veth1_macvtap entered promiscuous mode [ 454.369732][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 454.381594][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.391707][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 454.402281][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.412926][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 454.423823][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.433834][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 454.444463][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.458636][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.467227][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.476936][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.486636][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.497568][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.529040][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 454.540436][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.550525][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 454.561153][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.571202][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 454.581979][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.592188][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 454.602974][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.617045][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.627920][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.638290][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.726650][T10883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.736325][T10883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.745681][T10883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.754708][T10883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.132720][ T8720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.140912][ T8720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.152702][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 455.296217][ T9228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.304452][ T9228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.314694][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 455.332618][ T8719] Bluetooth: hci4: command 0x041b tx timeout 14:39:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000100)={0x0, 0xffff, 0xfff, 0x4, 0x8, 0x608f, 0x112, 0x969d, 0x5, 0x0, 0x3, 0x4}) r3 = syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000300010000000000000000000000000a14000000070a010100000000000000000000f40a32f83acd91f2010000000000000000000000000a"], 0x3c}}, 0x48000) 14:39:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) dup2(r0, 0xffffffffffffffff) 14:39:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f00000001c0)=""/102400, 0xe7, 0x9) 14:39:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x929301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/5) syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0xfffffffffffffffd, 0x10001) [ 455.847562][T11120] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 455.863189][T11120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan28: link becomes ready 14:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000), 0x4) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 14:39:26 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:26 executing program 2: syz_emit_ethernet(0x48e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000002", 0x458, 0x11, 0x0, @mcast1, @local, {[@srh={0x1d, 0x12, 0x4, 0x9, 0x7, 0x10, 0x20, [@remote, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x3a}, @private0={0xfc, 0x0, [], 0x1}, @mcast1, @mcast2, @mcast2, @local, @private0]}, @dstopts={0x2c, 0x1c, [], [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @local}, @generic={0x8, 0xbd, "d31cf3fd975c6525735ba1864e655353c97f3171480a1d39f763929be70113287f879e1a887d4c9fae8df4ec86190c6d27db1cfc4a353d9a09dbea8b4d614e972045a6c53abe09c6b8aaa4c1fdf61821e39e4684ae76cea4cfa84439f9cdd956b8d4cdd83fe47754c461356c2d2ca3dae5328b48860f6ec0b6da90300b19f2aeee692de90cd09662b82ae31060fc29edec066ba5a343298a1b10540a37f7ce994265bdcab33fe56d2fa2a5615c4f8c211f3214f420982eded257da8b3d"}]}, @hopopts={0x87, 0x40, [], [@enc_lim={0x4, 0x1, 0x3f}, @calipso={0x7, 0x50, {0x1, 0x12, 0xe6, 0x7, [0x354, 0x3, 0x7fff, 0x5, 0x400, 0x7fff, 0x800, 0x7, 0xbe73]}}, @hao={0xc9, 0x10, @private0}, @generic={0x40, 0xd1, "f3a91a0bb11bc4f03b2a6fb6d8e9923a1b0308e0b2f88486b41ad072468504da12dd5df963367ffac8bdfcd58d304179dfe8e786cc36818905a4c2cee8ac666a2e46399acabd95270e29ee89336e1dbea332c81bec2067541990d8b6cbc64df2dcaf197882160be8c381dfa8207a4cf627851f7adb1533112fdad291c3b2b25e5c64e91b4513fb3c2f7906675e69d54ce021ce6f5ea40a3212f9a94ef21ac80e6be04080241966b4667dd1ea0116824fb3bbb2710a63fffce347912e6b2cda450a3a2f5ade35f9b625756ed465dde5d8a6"}, @generic={0x80, 0xb7, "6c12db371e4b46c5390d5129c1e6fcd2420246b8799499afb5b1e2116b0385f0333633e5e4fe0df9b0549d81180861f2bddc21f08d55d7a7fe7225f4b0ffba0dcae64f57a87bf80141fa0cf1514f174d9b2f27d88cea6d69c3bb5ade709da5067bd0f1812dd8d5450e5ae26ebdd0ef59f88c4d191eaf754b8030fd5d587d2921516e11d189a53cefd277a9e00ced6e25fe0092e8c297271a4922546da25949111900edc63f86b4314cd82580d6300848fcb5300a3661d5"}, @ra={0x5, 0x2, 0x99b6}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x82}, @enc_lim={0x4, 0x1, 0x20}]}, @hopopts={0x11, 0x2, [], [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @srh={0x6c, 0x12, 0x4, 0x9, 0x0, 0x60, 0x1, [@empty, @empty, @mcast1, @private1={0xfc, 0x1, [], 0x2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, [], 0x1}, @mcast2, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}], {0x0, 0x37c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}}, 0x0) 14:39:26 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80103) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)=""/53) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x601b, 0x101000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000080)={@hyper}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r2, 0x800, 0x9, 0xfa34530000000000}) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0xff) 14:39:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$caif_stream(0x25, 0x1, 0x5) tee(r3, r4, 0xfffffffffffffffe, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:27 executing program 2: socket$kcm(0x10, 0x2, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 14:39:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0xff, 0xfffffffc}, {0x74}, {0x6}]}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x9, 0x9, 0x5}) 14:39:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) [ 457.400772][ T8719] Bluetooth: hci4: command 0x040f tx timeout 14:39:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @rand_addr=0x64010102, 0x4e21, 0x4, 'rr\x00', 0x14, 0x9, 0x5c}, 0x2c) 14:39:27 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 14:39:27 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x9, 0x9, 0x0, 0x0, 0x7, 0x10000}, ["", "", "", ""]}, 0x1c}}, 0x0) [ 457.919200][T11168] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20001 14:39:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) 14:39:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, 0x0, 0x0) 14:39:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) pread64(r2, &(0x7f0000e3e000)=""/8, 0x8, 0x103f00) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1000000400204) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:28 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68101) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x10, 0xffffffffffffffff, 0x35006000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @empty}}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8008551c, &(0x7f0000000380)=@urb_type_iso={0x0, {0x8}, 0x9, 0x4, &(0x7f0000000100)="082782d812da0eb6c61143050a5efeb095ab7b427789d91ca06bae02a775d5ca111b43b2b341435b16877fad147bba269ed74d8ce88ec0c12d3b324c239e86fa4f82527bb5cd23513f9f5de344d1170e29d987c52977faae4e49100e0920da2880b8c7df4915d160777eb84bb501224d8a8acf666b2ce73d56e36c19d6f1bd443f92f74c1dfddd8ba20b7365954453f0681924a549eae2dd12a020360811019d4921ad9a15ba79cc865e30605b8e811318229fac9a9656c2e6fb648c0a11722e668f6916930a4978adf43bdda449edda671373a1b9a2f5f2ec749e38ecf54c6fdfd8ecadcbb69444a2a738f11493a8afbf2378baae52bf70e2", 0xf9, 0x10001, 0x8, 0x15, 0x292, 0xffffffff, &(0x7f0000000300)="7b61105f54820b2466c3a436c4027580b8a2539fc260a924925d2ec9b40173142875f6c5773deb8b530bef486faffc331d919f8556a815d74cb26ca5af043bb6cdb88524efd2b074f93a5cc4b0879756df3cdf37581006599c57d617b380046ce200ccbf", [{0x1ff, 0xe9b, 0xce}, {0x3, 0xfff, 0xffff}, {0x4, 0x10000, 0x8}, {0xff, 0x101, 0x6}, {0x3fe, 0x9, 0x6656}, {0x2, 0xfc0, 0x44c}, {0x6, 0x6, 0xae29}, {0x3, 0x80, 0x1}, {0x2, 0x0, 0x49fe7df7}, {0x80000000, 0x7, 0x4}, {0xffffff02, 0x7f, 0xffffff40}, {0x56e, 0x3f}, {0x3, 0xaa48, 0x9fc2}, {0x0, 0xd69, 0x7fffffff}, {0x80, 0x1, 0x9}, {0x0, 0x80, 0x20}, {0x8, 0x7f, 0x139}, {0x80, 0x6, 0x7fffffff}, {0x5, 0x9, 0x8000}, {0xfff, 0x8, 0x5}, {0xd3, 0xffff, 0x4}]}) 14:39:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, 0x0, 0x0) 14:39:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) 14:39:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:29 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001214010000000000000000000800e4fd7f004352ccec7999417bf56872111bfdc894a4ded5adfc897d"], 0x18}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000a80)={0x990000, 0x1514, 0x7f, r0, 0x0, &(0x7f0000000a40)={0x990a7e, 0x0, [], @p_u16=&(0x7f0000000a00)=0xfff7}}) syz_genetlink_get_family_id$smc(&(0x7f0000000b00)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20044000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x34}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5, 0x8}, 0x8) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r5, 0x6, 0x1, 0xffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) getpid() ioctl$KDGKBLED(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)) 14:39:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001540)={0x788, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xc9a}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0xa71, 0x8, 0x4}, {0x40, 0x26, 0x4, 0x1000}, {0x9, 0x9, 0x1f, 0x859}, {0x5, 0x2, 0x6, 0x6}, {0x942, 0x80, 0xf9, 0xfff}, {0x400, 0x80, 0x8, 0x6}, {0x48e, 0x0, 0x8, 0x81}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0xfffffffffffffda6, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @mcast_rejoin_count={{0x0, 0x1, 'mcast_rejoin_count\x00'}, {}, {0x0, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x0, 0x1, 'notify_peers_interval\x00'}, {}, {0x0, 0x4, 0x5}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @activeport={{0x0, 0x1, 'activeport\x00'}, {}, {0x0, 0x4, r7}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xc8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x86, 0xff, 0x5, 0x6}, {0x7, 0x0, 0x1, 0x1f}, {0x9, 0x22, 0xc3}, {0x5, 0x9, 0x1, 0x6}, {0x7f, 0x6, 0x7f, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xd64}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x788}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000001000000b6525f0e0f789c5f000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffd88) 14:39:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, 0x0, 0x0) 14:39:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r1) [ 459.482355][ T8719] Bluetooth: hci4: command 0x0419 tx timeout 14:39:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000000)={0x5, 0xcd3, 0xfffffffffffffff8, 0x5, 0x10001}) [ 459.619499][T11201] IPVS: ftp: loaded support on port[0] = 21 [ 459.726822][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.461651][T11203] IPVS: ftp: loaded support on port[0] = 21 14:39:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r1) 14:39:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:39:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x10001, 0x4c000) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 14:39:31 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x0, {0x1, 0xd2aa, 0x97d, 0x2}}) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000000)={0x1, "523370ee38693b243da6cea53f684f0875323f7720b7bdd1bf83290d5363b570", 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000013f7bb06f000000000000000910000050900010073797a30000000000900020073797a3200000000090002007379707a32000000000c00067a1140450055db36000000"], 0x50}, 0x1, 0x0, 0x0, 0x5c}, 0x10) getegid() r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000080)={0x1, 'veth0_to_hsr\x00', {}, 0x1}) 14:39:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:39:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r1) [ 461.476062][ T9228] tipc: TX() has been purged, node left! 14:39:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="30e3c9c8ee63939c341e8b34cbe089393ca32f23bb0119f1d6538e80a0402ba7d3a9aad8455b1beff321f7ddc57e07466bd15f3108daf724fd740e71b9c122fbb07f3f2c34335f78f2aa2ea9deffc472ffd5c12e9bdc42eca3e8fe6789b3691bc6966bc667b8540212216f1725b0dcd1ad4f668528d6a52f2daa82aa10093426887ae80000000000000000514a64139f3993feed962020f8d3bf88d683c83d407a811c16e0d9f9b9a30f2950c07a34a6c466aedd3faa9c7d4ceca7b251a0ef5835c73e2a2a34b9e5246a5a89d0ed98d71766033da000"], 0x2a) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 14:39:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010008506008944b83500002ff1070000000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48248}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r11], 0x20}}, 0x0) 14:39:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:39:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x48940, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r8 = dup2(r0, r7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, 0x0) pread64(r9, &(0x7f0000000040)=""/14, 0xe, 0x103f00) [ 461.855877][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.006819][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:39:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) 14:39:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:39:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:39:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x6, [@broadcast, @random="96a478e4fed9", @dev={[], 0x11}, @remote, @dev={[], 0x12}, @random="ea2dc40dfc41"]}) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) read$snddsp(r3, &(0x7f0000000000)=""/33, 0x21) 14:39:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4001) 14:39:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) [ 462.872875][T11307] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 463.054397][T11313] team0: Port device bond1 added 14:39:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:39:33 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x9cc9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x100, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000040)="f9", 0x1}], 0x1}, 0x70) msgrcv(0xffffffffffffffff, &(0x7f0000000080)={0x0, ""/51}, 0x3b, 0x0, 0x3800) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) [ 463.189990][T11311] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), 0x4) [ 463.524405][T11353] Dead loop on virtual device ip6_vti0, fix it urgently! 14:39:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4001) 14:39:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) [ 463.731273][T11353] Dead loop on virtual device ip6_vti0, fix it urgently! [ 463.749579][T11353] syz-executor.4 (11353) used greatest stack depth: 4080 bytes left 14:39:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:39:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x9cc9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x100, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000040)="f9", 0x1}], 0x1}, 0x70) msgrcv(0xffffffffffffffff, &(0x7f0000000080)={0x0, ""/51}, 0x3b, 0x0, 0x3800) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) [ 464.098870][T11363] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x15b, 0x22000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r1, 0x9e, 0xffffffffffffffff, 0x9}) prctl$PR_GET_KEEPCAPS(0x7) clock_adjtime(0x0, &(0x7f0000000000)={0x48, 0x5, 0x3, 0x7c9, 0x3, 0x0, 0x800, 0x3, 0x3, 0xfffffffffffff624, 0x5a, 0x100000001, 0x9, 0x2, 0x7, 0xf4c0, 0x521, 0x0, 0x5, 0x200, 0x4, 0x8001, 0x10000, 0x10001, 0x5, 0x6}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 464.265706][T11366] team0: Port device bond2 added 14:39:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(0xffffffffffffffff, r2) [ 464.508209][T11403] Dead loop on virtual device ip6_vti0, fix it urgently! 14:39:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4001) 14:39:35 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) close(r3) r4 = socket(0x10, 0x3, 0x0) r5 = accept$alg(r1, 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000001c0)={0x7fff, 0x8, 0x5}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$inet(r8, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280050019000000000005002d"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 14:39:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f00000001c0)=""/102368, 0x19032, 0x88) dup3(r2, 0xffffffffffffffff, 0x3716fe0ff67ea379) 14:39:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(0xffffffffffffffff, r2) 14:39:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 465.312649][T11416] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1412, 0x4, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x810) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4001) 14:39:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(0xffffffffffffffff, r2) 14:39:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000e8ffffff0000000005000300110000000c0004800800024000000000060002"], 0x30}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) [ 466.278672][T11466] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 466.454740][T11472] team0: Port device bond4 added 14:39:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4001) 14:39:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioprio_set$uid(0x1, r4, 0x0) lstat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002680)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000002780)=0xe8) syz_fuse_handle_req(r1, &(0x7f00000001c0)="cb510494ead3e5c827760ad6fddb1da970ad3dea3740a14d20599c7d6021dfa4310b28e0ef7daaac2ebb8603c91f344a2456f1875301443f528094b53856bc04623f34088dea1ade827a2428b371c00d148b6f4d452b40e55164b5dde60b83b9ae0fd3d97a13b9a6ee035ae93191df1b829541608eff279a0ede4ef8870570a5906bfba8cfb2e07a08817292c8150c562b834f2c5562c788fcc2f17ea83548d594b691968621a27916f0850f134f7c92bea5b24404a71ed01cbef99dd3d732d0e43dd2dcec8bea9969b8b7690d5573e0a916bf802d3ee771c8eb8fbf7d2ad7025891b9f66b1517ae2004a095218ad08837476f2c91e1c38d1e226f2539fab138daf2659aa480242da5dd5239df67f4fe2b50309d111574d680e6f6238abbca1715e285fbf865c54770b6d3fd3c280bdd3dfdcea99d094c3ac7c8c7aeb124357de1fa7f998a8e3002b9324feb26b545e87a34958d9273e8f9a64ef11a416718d10d24c1a59517560366845f2854628c1a28b0d9be2fb52a4798ab9b3709a9c08250f083a7539fc16c2dd813296b6cbf3235caf9d5afa15414f38adec70ebdb67aed2bfafb60de4274e3fd7439f892fa262159f2c794681b77c95eedb076c3d8024271865499369dda7fef14e6b452009061811823fab7b6aa065bdc6f2226b7fdaf25aacba75c7fb1cce92ef99db65acc9814c3da80c69fa2bf03641aa7fb38040d6091c23aba1c9736dfb9513b4cabc5e836d813435ccd29a90af84554930305ecdac33b0010bb955fc216f34cb536e76b1842cdd5722e2c8a22b43e0f637fdb7d1919f986b9e89f5836ccce201f406ee31b13d201dbfcecf3c73420cde2df103a7ec98060773b1070b025eff55f11887e4a0ef8e63664765c0302bf4a3406be255190c83bda6159031eae64573df4e5d84277d7a898de14ecc18d4c7f287022726ad386bfca80d68e17b29138cfcaca065c783f26a1c393d998da5a447c4ca835f4326ddb4e0e097b23481f4255de5a9884d21553c0d1acb9cde89cec24f790fb5c29e8d6da31bf2c79eea4842e7de281ff51ff2d6ee57c74bd67d72fe58bef832aaa4afc223fb59244127869238ef7aabfa4956a588b3855307d8c296e1c8f03bb13c49e2ef536e26174069bc873ac1bac5bf17ae8818380ef81931e24b88f78250faee3ed204f312ab8d5c9e0ebb723ed45aada4a4606c1c75c05c8d1581b6149b5b7532508a2c946001488c1e10b616a1cda96d44ebcf666d3b0aac076266b0446075eab7dd52c30003fe8561244bbf4fb2ed288152921cacd60898cbbd5df58db0265d99a98463badb401c510ea5608f765f9a8c426258031f3f951a0d8eec7020d567da42a1839c12fbdd19674580fb361220595a7b5175b51c803d72f4b1b2b25b5152cff85cdf75308ac572d5af432d9892bee25490a40fd623aa96b0e7bfab2de70e3c879e9f76069290cac4875f13fb2179a09137ff5883c4126d06931133ecc08330a286a1731df29fe7e111cde0d7c55d8fb92bfd0962d52c523d2c577024efa9a4d6daee81e4978f050a33cff8f74828fe052964460d002e5f817b4b08065f7e17de57b19975274974051395cf914214fb2acc28b55a88cc6cde525a61dea5269ad7e0c592065e1a8e13fadd21b798dd807f8e06e10a26832905dd5ed81e8ba286d5fed98ed80c9fb9ff0f22adcdd61c58d5f7b5c7a97e0d64a691f8857dd35b934d74b6f27530ada1f22fcbfe843bbf3012d1af80c63c490bcc6e9d8ee3c845e98c5637cb28fbce8b072c3f3d3bd932919c11219767b79cfc9972d7bf1a40a027d3cfb9b78cc2d04afc886ba2153a103bc6154443cdcb5d142a17be3cd8dc121162d5c9e38de1b9cbe543b4667fe9eb5edd810060455d6b9fada3a04b5e8ae150574806454c5ab35462223c5a57133770f0ad4851704d568737a4e87fcb2b4382225650fad845ff98fb8bc491bd8f12f37ae620842066f049afb64fdfb270957321321c9261e1b39e279411621056bd6ea9c009f78441d7021064f5cb50999dc0a32b0b638f18d1f557da380c8cb2fc0e935bbf361bfd8e45ce8a6aa7e02e6048fd36090e43b78ec37b585fa1f2c2bf2af9aabfb19e8c931452369031e93c19020312e5ae06275084cb0c118aa7751ad806392c3053f4a92c7084dc558ac582c70556ec71a3c8c6425d18e93759a683027fd6eef95c96c05f376cb93109ef8cb1cf52383020d722a2a5154dd05d22368d62d88ad673bb64ae8da8061fb7c2b9d3abacf630fb0ac0414ef0c148ee0d7d35e0fb47dc68f6f1643c11dd5a31554fbf0f80135ee411082b0e96c8e39144cbd4ca21aee4befaa2f63c1ccfa16240cfb58a2c693e76b04ed15b6da7279510004eaf1e3b8f679e33f0ba8f144641ba0b84398851fe9f0356e145d06ded03898792fa07610873ad68636092e23e5bfadaca5654e5346d556193696459fbe9f5298b0515eb638700246d25d5ca3e47196d971bcf4cb60fa90ab71f3f5847dab6cc88801a03efc48940666219e4300649fbe0c6efc8043cf3aea83ba332aa3ba71e58becb1e85efb12d7ce455ae670ab539d08726d96429fa38c28f036b3d7cb92faf937ee2fe7c69e2ef0142943198a31bc2e3aa93b3c242466bcabcd531f8fa6445e4dd446df8980769b426afeb998e2540f59ab2c4af3941edfc97b3f294518115d443d3e11a41353232ccd3a1cfb3662eba84152cd668c69849f0733f9b4d9fad468a8cae9be25fec850ba905a276605786a56387ea1ae29622e6e96b59892afc3181d9d23be59a8e963e503918570bb9e95af2495e634663ff2534afcd6efe55b086d9059b5d9f0149b9341c7c8f785acd21a85d454a9e5bf13747da850478076715c6c107e6bb2b2c04fab8d168776fb38b7d82f8a67e98409a1660e2f2489f3c8615d3f1cb396d22965b12d89be00b8ec7c9524d6e7498c544079139b9d0337b36e867e0cd0e9af91f35447985cb22b2791cf915dcfeadfb22cd4ba6a37b21fc1feae7a87b6eb6f0a70260077bb1799cd14ee826ceda5472ad5e09921c90a527e4940f6b7f98795aa5d8cdd2210350780c83f4b84ce3ea47809d20d3f630c8f7355a88e83b17444040002b0245113b5a4ccb87b96c239edd564487031fbc4142de81cc7edb8f1eb7f0411ab099483a8c54d0cde3440099255f11e17dd42bc5db983fb133f1697270bed696e08d24787219c54fc5da3efa6ef0d0d92c7cce2778f8a11feb793b48db157d99948098b19fb90455d45ec7f10b99f20e32690b71671493e1206109ef3b22d8726bcdbcaee421ba7339535ea2c18c9245180226f5217a3b406271cb9a7e8f724eaa9750ebf2c7fcf810fb741dca51571ffb461e4b3cc658d182663360c7df52c385a2944201b41427db47139a6a23513e0725d47034bb572ea9543bbeba110468becbed27dbf148bdf9a432177cc5e34586f1c0a6cf5afaf06eab2be52cebb225c3efb914739ae92ccb2ea6e1f115820925768b06089ebac41fb0c5d7c58d31de153860a1ec05a33105b0b97bb67be2d56c41bf1c8e5035eb0f28764365f900e194d402d649e0c5062a0a99a362f3fe61d4703a7b02fec8513215c6b3f617f6835f9cc454ccdc708b2ade1f5e3fb470d712bf8cca33698b404b6eed5e3f5bc30a554e12f4cc696df24466d4f9146fc295e16a137d35bd2755d0c854a85c05990ec4905cf416d9d7709af0cdccc1b669f75322aeb801b998f4decc26a022b51a388872a5c1d6aa495178010e73faee4045b5de31d0c8179805e314b44630c54639d9e73153480e0da48d1ded0102c1b24e229eff685eb469397b083f3b26b20a5ccb4224831fdc5410cd6d492717fa2768d94f01b5245e7281a829e5979903759984d6e027d75786e182fa1548851396c3fab5ed988680050ea09e3a14118f39c5067f9227290254fe27f302cdd3f329d4d7d5ad0a1ba479bd41414ed9f3732f00a6f5bb84c7de8671bd55b4a40a4aaf09a30bee17335ea8ff66a9ecd75e70df21605afa092f04377e945c0802bd413d30ee8113fe9cfc2a91f3ade955b7eb06b32315d28596fb0ced200fb2c3993ceec58b92b7d5ecc7e9b2f9d64998d24f4ffe87ebd43e61061f7d4396bd223a14c35ca183e41ce67a9b79c281e039a6c360bc03727d25f2829ac15941b785c2c30a6e3c00ec52dd735e701658a85b9075105cd5738af2304bac7a34ff25f99c8dc20592e98d514978add676f0ce11066acdad1b7d81036948765dd8cbc45fcaea318cbf595724d33e762035ceb8df59998c459fe7ddb999df3e0ea2e2a5a6da04c4b0c6d716518223f2b39953e83fa98628fdb490fa109504d134dbe8234fff757c447731fbb41372929622833d7a214c18b44203bdca1cd69faea02025934341564b631f77786954ff46971aaf7e0bbe32d214e1675ddf520254ac8d514c49a64cdb335d90e5845f5c3f02f6c3b8db9fc03e524ff784a26d5314811924795d431652be14b60797fc566aec20f4fc7e0d1f189ac488a086446cefe0a78af4a97969521626efb2e329d87b89bdea138b6bd1defe98f5033ca4e3e960d4157a11fa7c637f742b8cabd9407b365baf48bea6c64a7848ab540b92ca25e78574b8ff56a0738b4d4e592af14e69628d11f51501141b73e0bc9f22e0d3033e22cfbb911bd7aee49f502c6df308b916d21ddc58e4519002eb5a363dd634c010e28af029c0ff024cc6561e7f1796896ec17fcc43751ef12b5769d30b9a54258037cbb29db810136a2fac344a21d5303cea3447227d165cbb0546907abe531739a9d8736135830ab7b1fb8302590f4395fb5754bf78a6e3d0eed258b40ac11994b79acdf37aa9634a30572ae34b5cc9be7de082fa2c7486bda82dd50bdf7aeab6f433a24dbb3dfda9aeb315acb0e6509dc9fd32dfa02c8c67f8ac86ade017087b4c8183506a215d61b66ee1db1667edbfba7cf7c951e9045f53a28c92cb469411f37de95d71f367de5c5581dea70c9ca7c7bf1b8c5002b3f6087340dbc5b2a7ab2a02d4b82f7f501c50438a028150f95be68e6020a168bd126f8180781a7d4db83cdbaa5a2ae9f479804ca3aedbbcbbc0def3815ae77e0a7fcdd9bf56f5656f4523214aa684f1ce5a728c3d0181ba89e43917255c1a0da00b47e9361388208812e2810e4be73ddd23d156c8c47d71ec7b11d972099a3347aba1d28087d38deb3bb93b56da3bcd2e15dca2f5cb56a0f39cc221bc1a1c3eeb76f80a63f172fa0ce9e41123d44067e7a635109739fb1601f556624f50708d52ef010c9277af0582ddef1646e92c8b5fda08ee30d5fa2f19ff3ef55d1310a873ad694b114f3e2af8f6e433ca4aefa49719055b4a88e92632b506efebe67c9a9e2c56fcdbc63b86ed3422cc6884e5a228dae5bb566ab4314c65854d9e309a0e7de91163803ee66ac1cd7160905a9d04e8213dfc3d69c895b39957758a511065523d24e45836790194313597f2e80b6af957ce26f4b0a56ec7ec5718364bca9065bf0701af2de484f8acb3f4a83123b8f24f5b6457391c41376a30bee9f2ad8730c88e07849ef93d82def6020342f8ac700df1b051981e6cfcbcab757ecbe93ce8857fafae902f8c312b5884bf742a2fa91b133c5495d6a336e71e2b33a0eaad22ececd58b559d125fbbddd9d384e38b3504da840eeb86f29b7e3543d5bf90005c3ebc51924b9713b3d18a0cf8d7cc73e2a3f4842e6c9bf7e966d7772df6bf66624f46ea6729f3d3dd26f8a92d97247a443cef7c998cac8c14a73165ac18a1621a11876c593681bcac98e718ae0861e7702457f33e9696c42a7c4a7929e243a1543bd3ca9ef8a05ca7a70730d30c448843be92b6b2ff3305b96bf0511452eacf50f1cb1ef2ba734d09f1ff3bd065cb2abcc6028114308eede0df2b141549a9d0db61c0ebec61a669f97445db1904dc9200c10521b6604bb4fe61c2876ceac1032c4dd7b117470d8da22fddf62bf3bda7875b01bcb1304ab9707a327dd0d981ca3ae0f4594fdcb66ec619682c672aeeb7d10443a599f8c7899d61854fd36db82b26e6e76b1be279622e54a98c1e017cbe2638d1b22cf8ec8aa085f346170516b7faeabe6875a15698d1cd780b4b7e5ea71c975fde24524005d933994809ae247769453971f448923f6a03cd784ec894014c230fb8325365abbbeb9e443bbea0d594d97f69426cc18fcb0eb004b41996eaba69971e53881ee311be96f3275fa6e2b4aabb6e8cee762049ec2868d5f9f5139a36ad1189a6ebcfa29f3f8d7c7a643903ce2982c00a9b40bb624fbb7eb25e8202195e0e45a4f759f350f9d03c397a2ecf35b56d682f71eff633f9c56f6855ba6aea64dc71ccb5d57a09481441f69423668e6cb0eaa5c54356246eeaaf0482740986554b826c1dfdc8f6d8521f04a22f806f0bd84483365a5893738892dc0a3839289739033a4f762ed9da2847f73e6533a5d880425c751db5f91ab2ca3134bfc30e1702fe5c448d8feff8abbc262b8184096ceb23b1749fb1a71d6cccfd29698c43d9486d7b3b2dadaf479337ded8f030087491f3d967197d45f8871bf8329389895d9dc5de54bae69285ddfb738ff929f153fe38475bfc1a1a57c49a4bc9eb1f941754fb397a9ad77b41d471876c1f3521a306580b63986899a7dd85de61e46d6bc1582956ceb5ccf5db69adc253b2cdd5e3ecf6f601af010a81dcdc80b1cded61ec685c9b352b4be6851e185a27b6ac36096796f519bfc76945288a0d1140f9691f70e16983a6228148742458d56dd5da6231bd38c617720ed1e166eba6b2f09580b248904824bc2b1ad07353ef367610d9be8000b7f195fccff62c05aec5c0456299b09d05e597f876eb8c4c0b6fa0c75766efb4bb1aa6f81c5fc69aedfc85d7bef6e3eb3b020146f6e0da8528404063aee53ad6ed6972573b5594a48cff2911baa19ae05417af609c0f8c32a02d8e37f1d33f1c7726886eadc15c5a1a9c9089df7850885d253fa3526162cec3333059160b9d8d68e49e94e390ad0588b83234d9d569bda71f83f6dde39c36b3f6bddcc503c4fad699c47cfa9f8334ad1e1c54f4377515d9135d980db92c7363666898c06956c2bb7f17644f5b081d6dc1ed5957831e72b4cc5f06f6c192fe36251f12fbdf7b8cba3f08624cc73672dad77733d8a7e6b482c9686bef0e2ae11a75e8a5f2e8e1ba703e68b5e08a48d91e4a10eafd5b8b35e6320ade0101fcb02905542cf64d3f75d06c19f6d325f01ec014e5f612e9d30db274017f4a2b6478ca7e5b91bff38a1a35939574df89cce4cd6178e7acb21f8a5d0c334c8f834cd319c0a50191fcfe000e1a10ba235640b0f2733ba53af02f83a9f716711a59f777ebae95fd64f339c5181ecc4d102f5e8c284f7709a17386d8bb1683e6282b6f7605c8b0b6d6ddaed0d714557c7df9dbdeda3d701b6a9ae219a5cd2c4a5af603033dd71f70433c8ec111e32db56c97f4f66e830a7fedcba2d16d82fa6948b0e2742ca2e3806fbf8e721b1d55f6e47c9ff4d29380d07b25364a328734e3dbea898a25a8bd5b10df9de85393d3fa38bb9edcaf07d7d50e4f8416e5bc24edc3f8d4708fca801a42844094f5ad9b40068b0f1e01127e63ade7b6c32bf2ed627af77ec57c95ef5837d01299152482e360a1170b2bbb03ec53f893c24ef1beb04552edac1b337252a62cc2d77be2f90342ab88fba8da1607ab529a03f5960287a5afa24c10934a930c2aa4da9e40ef22c0d0e4e574618644f448ee64d71955b33deab486dc78b315fedc5a64322d7dcf3bccdffc753eda7b6861ce02e88684e18c0a2c8c0c587571eea9b769403e3bda1ba7502d9fce50eee893b4dbf641968016df56b8299edc208b7b590bb5fc27edf9e5c66b2c6ed7cd65c97d25819f1423da70b353eb806055e430100cd406f42f735f2f36a841fda18295e5770bb13bd1a3553ef2430790a84e65124f95fd207448dc0642427d13d79d50f7055144b482019989453310357a432964710234552a39a17a59acf3c9b7f02e84a5628d9061e18b9231711450f6d535b30400a7b7af3a9e2bfbf63c2e6fae2162a90976c10a054f6bb1f0fd070c54ead86a601f9ce5bd95be625106995d7cdf28575eafb0395e3559bf53c00336487e5323f87c8e354cfadf71e855505fc81e66a7607579fd42889fe9cd1a407c785671cc1cf930a847cccb1eff37fdb0621e3d515056af4624032f3bcc35cbc5d21268cceac29ea6af756b8f0790988d940254042249e24009696bcc23ed25ae9b149a4449e70b921db65f8d916babdae0c659c5da00415f2586525d1db7c240de1156f76a29669879a85bad755d877e63e1367fd2806679352b5032e5260d73972bc30222a74b990ea18e5be8b3f0a09f7973a6f837282114b33baff25a4eea979e16e8393677c92d7068313948e95f36695c98c025857b981f0ebbb6765660f3fec65846a4c6c795145d6cc47f50b4f41badf46d4d7207ed3c6b3af8405ec12d8f783d8be18320ea6530856a57bc572edc40a215b72cd3883aa6fab55aa8068c8ae5d29a6978bca8cb7438b3d321ebdf025a67522f80e657ea18dba249caf9db06e8db924f89701718e8939d428ab01ec0873fd64085dc91540c3807bab69759fe76963190092e0cd965d10b0e588e00691782daded8879c3a325bd606dd8a84a82f99f405da6d0675a3f21b7e96aae482ed5d48f0b98d67d050753c517e02f9ccfcec7bfa6e505efb867c91bce3634d045154a136db2619b1f579ec4919d4e0bf8657bdfc66ab8033f9d3f1f00bd1707d15129965082b2e6c72bb38c9e137b458a8e295f0a9ce57ae514128da5df3b1eaf427acfb26d8611e69808d09e9a3de688ca038b277abb95786182ec2085effb234dacb1c4374bc7c96b199bb5e819cd1e04149dd566761b4269d26d3ca5637ef23ff596b738e0c048d7535baef86c6a76cca76ff054e8c164c79e23b9747d8f36e477b5288d7a570c84c539088c32e71e48fac6475c2c770d5e49d680a7ea5c0a5d70bab8d5bb6acb322fb4b8ac0d48225347c1b87104457593193d3b73fa8b1f98ff0a34c0e6025b17027e73478cd4d5fd81fe7a75902c35f5805d4df12155dd11f365e3a67b9bac7ba59c76b8e77e748ab4bacc8e8dc693f96d58823fa9b3a855067ff4b9c21d281079bb430e9e2d7747f4c000d71c37a09e808b0485518fac88b62fc69dee9a7d14677265de51f84fd26dee8943579ff7a42447dba791d520f84e750e38c6ef50788726dac9ffd069a6e1132e570f514adc00a831a94fae97aa076cf48ee76706fdd137d34be44fe477a94203318a2596151e4866fd39274abca17f8f6e27ae74144ba310cc4d75130ea290e83633ce5f622a41ff7a7af7f140a36d9480dfd7e6b8b4f356e87099ba34040846826272ae567062d2759c33ee987540cf1df0a6d32fb7b5edd9246918d9bdf7a13631758b95ec2b2975339548d361895b448bd0f0b5702bc6c39108be402bf3f7c47312f9bd2c8b2457be79f6a237a142465231ec5159db312a892bad48966425c5201d5d4ac86226f156cd024bd7ff58d755223ff363986c3422205d74485d15cc8da702473036a999ae970e99e6daa0eade77f69569b5e429b3893b9bd714dfc73b068d909787e4f1d1d021923d3295e03dd67dfe699ebbadeeda3dc1091109da09cd7c188a77170f6a94925e475caf894270bd9fe5bce2a4e3c2f24e48c8f94a04a00ff7006c29ffc770c2bfbf67c833fefd3a78fedf29184898fb05dd79d30b9b2240b925f098ba6763d8afcabb412643aa4a01b21f5a3edf130096076594b7de546d7153712a6a695b4d908fe5841b8d3ef950cff4b85c5c51dd439aa9e688bb982e398bf1d3b01f9b662ffbe3c9b22e3e442971e437329fe1cc3e63ef13478bc7c5058e954e2bb6a9c3ac52ca240cc77c3560c83caab2c62cca834a5175e9048a18bf50b1898e89ff3250d92c0391673a22a8e3a6ef91172321c254b3692eb0717063edebf58ddd5bdf411bcccda2e46416064bda95831f481716533e0ab218dd75fe8a6d240d3c9b62f3f1d0aff77586e1e48bf0556808ba67ff4cd09f07293a14e2e6c064747a04ba40c35701c03a5418961eda3528d03017a4d3eebed88548da3a212f8878c7e0430372d208bb72a12012f0f83c7d094cdb82f2ceeccb4cdabf684a181d94662ad0a11597d3bc665369b915643e77df7d69ef21771cb8eaeca12392ce6f32534d9181b02e29c55fa250e22de2da4449d9d06a3842662b25dc95b58b4359d4658d79427e330d03ee5ef77dbb7b6f7394ce8380a3f30156825211218bf1b1dd470eff2c0ca59600b9f54089eb17741a9647405d44d1f077a361f74e3307fdae0a0ec6586497f9bb609cc3ca3f1e167fb88aa475a64191eebf41aedf6871ccec502194ef15ac155fd457d0d996f7a2462e9a0faa51069c3c9f77cd111a3489040016544dd9edba7e7e1fcf7d98caea17fdb5a09155a31e3cc6c7e4b01d02cc07f8f2c355d669cefbae024743d9dcdd775304a14d157bac1188efbaaa890808a7119caa22dfa1582f3c0a79a5252dbd0157587818690fe2d75c754a69253e6405e8a23d2956e9ab1ab524659f03bbe7b7cb4f536efa8439c4e8a05b75d3c69c41a822899b267969a9d570de47d4e68239e7662481a713eaeb575bd04befe5e5d8cee15f1266270f8e957ba3e016434e0d2e255299d6f22d5199e82fcc7abec793b6fd763c410d841eb5e88a68326a399d8fd74c294877df848326a151608d49cc287c36f640cb4e586af4a2771b122492181ba4de418a9519eaed17218a20852b4660eae9d754970476c21fb0b709c5a12821d9a800421c6bf0ef83bc698d57c873dcf7bb5e234503a1ddcd308ab385ec4f10081793e01be7d82400d1b1fde91912b5f8931dc473219769d3469adf701061789bf7f37fa8816950ec5f6589a1370511983c706acf1c2c750c68445b663436ff46101715c130628f5e86cf8b34ae980e52c541023fac6608b24b6e1043a68d83a57b691245b58395d82860f17be863b70739187bd0513fc015e5af2d5cc55538d1808a82dffa7b369f35ae8576a15bc0a602c7ffb88df3eacb5caf5403116c8667af7fa738aafb4b9d16ac8c3e9f2a0919cb5c557acde37ba35dcccf01de9babfddaea4121d0ab7b162d69ccf06ca11847b183d78b4f0e2a760238fe3b1c7287be2fbbc7cc3b656e1152b8b5b8d0afee7a3d40f9fe7c08b3bac2db7f0c105218519efdef1105454fbc36a1579fd50de3ff1dc3a83ff03fa9fd96c8534417b321604999b9011299657bee7a24e37127b5c674e5adfd27a038ce842950a19feda5a3eddf8ea795e310252a6a11625f26fa541d7ae6107032a9d33862ac0288b3395c6740ed14c79c21b33b5477b7544238a6841cc24281bffd3afe551df2d240dbd07048fa532cc6892a3a24143245689261286a359c951ee0d5a2f1953d41f0ae2fa18601c4a02d4e609e224b96ab34f6218d28e8510e1ad99272fd2fc525054f8bc1df4741d229b3c69342b2a8d0c0fbbe6302fad0b74b4e5c2c", 0x2000, &(0x7f0000002980)={&(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x9, {0x7, 0x1f, 0x3, 0xc400c, 0x1, 0xfff, 0x8, 0x244}}, &(0x7f00000021c0)={0x18, 0x0, 0x7, {0x8}}, &(0x7f0000002200)={0x18, 0xfffffffffffffffe, 0x7, {0x4}}, &(0x7f0000002240)={0x18, 0xfffffffffffffff5, 0x7, {0x4}}, &(0x7f0000002280)={0x18, 0x0, 0x5, {0x1000}}, &(0x7f00000022c0)={0x28, 0x0, 0x9, {{0xb5, 0xfffffffffffffffb, 0x2}}}, &(0x7f0000002300)={0x60, 0x0, 0x3, {{0x3, 0x6, 0x3ff, 0x1, 0x100, 0x1, 0x0, 0xffff}}}, &(0x7f0000002380)={0x18, 0x0, 0x8, {0x80000000}}, &(0x7f00000023c0)={0x18, 0xffffffffffffffda, 0x749, {'pagemap\x00'}}, &(0x7f0000002400)={0x20, 0x0, 0x100, {0x0, 0x12}}, &(0x7f0000002440)={0x78, 0x0, 0x0, {0x4, 0x5, 0x0, {0x4, 0x6, 0x200, 0xfffffffffffffffb, 0x9, 0x7, 0x0, 0x8001, 0x4, 0x6000, 0x7, r4, 0x0, 0x8, 0x8f9}}}, &(0x7f0000002580)={0x90, 0x0, 0x7, {0x2, 0x1, 0xff, 0x7fff, 0x9, 0xe17, {0x4, 0x6, 0x5, 0x9, 0xfffffffffffffffc, 0xffff, 0x5, 0x8, 0x100, 0x8000, 0x73fe, r5, 0xee00, 0x8, 0xffffffff}}}, &(0x7f0000002640)={0x30, 0x0, 0x0, [{0x1, 0x8, 0x8, 0x6b4, 'pagemap\x00'}]}, &(0x7f00000027c0)={0xc0, 0xfffffffffffffff5, 0x3f, [{{0x5, 0x0, 0x2, 0x10000, 0x8, 0x0, {0x1, 0x5, 0x6f, 0x4, 0xfffffffffffffff7, 0x7, 0x0, 0x3, 0x5253073d, 0x1000, 0x100, r6, 0xffffffffffffffff, 0x5, 0x401}}, {0x4, 0x9a, 0x13, 0x8, '/dev/ocfs2_control\x00'}}]}, &(0x7f0000002880)={0xa0, 0x0, 0x3ff, {{0x4, 0x1, 0x5, 0x6, 0x5188, 0x0, {0x4, 0x12000000000, 0x646, 0x0, 0x2, 0x6e1e, 0x80000000, 0x2, 0x6, 0x8000, 0x0, 0xffffffffffffffff, 0xee01, 0x6, 0x6}}, {0x0, 0x12}}}, &(0x7f0000002940)={0x20, 0x24, 0x1, {0x0, 0x4, 0x6, 0x5074}}}) pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000000c0)={r8, 0x1}, 0x8) [ 466.983033][T11514] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) [ 467.278847][T11521] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 14:39:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x8000000000080001, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @empty}}]}, 0x190) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000540)) dup(r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="db80833c00000000"], 0xd4}, 0x1, 0x0, 0x0, 0x10008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0xd4, 0x10, 0x401, 0x80, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x73}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e26}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1a}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3ff}]}}}, @IFLA_MASTER={0x8}]}, 0xd4}}, 0x0) 14:39:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r10, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 14:39:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x204000, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000100)={0x33, 0x1, [], [@calipso={0x7, 0x8, {0x0, 0x0, 0x18}}, @ra={0x5, 0x2, 0x400}]}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000001c0)) [ 468.197310][T11574] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 468.343537][T11577] team0: Port device bond6 added 14:39:38 executing program 4: clone(0x191affd, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x4, 0x0, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@socket3={{0x28, 'socket\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 14:39:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 14:39:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 14:39:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 468.993233][T11623] xt_TCPMSS: Only works on TCP SYN packets [ 469.157030][T11630] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) 14:39:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) [ 469.272991][T11634] team0: Port device bond7 added 14:39:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10}]}, 0x3c}}, 0x0) 14:39:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) [ 469.702963][T11677] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 14:39:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/vlan/vlan0\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 469.978564][T11714] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 14:39:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10}]}, 0x3c}}, 0x0) [ 470.182551][T11719] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000000)=""/8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00'}) pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 470.685589][T11762] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 470.696777][T11763] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pwrite64(r8, &(0x7f0000000280)="d2633631f693d362ab548bf8852c9ddfcd0d9dff8f96d0fd22e1e3b3c033b193f0a2f9", 0x23, 0x1) 14:39:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) [ 470.891951][T11766] team0: Device vlan1 is up. Set it down before adding it as a team port 14:39:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10}]}, 0x3c}}, 0x0) 14:39:41 executing program 4: unshare(0x600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x121601) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x82200, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000100)={r2, r3, 0x1000}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f03000000450001070000001419002b000a00010005000000006e0000000000000000010400", 0x39}], 0x1) [ 471.115075][T11775] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 471.220483][T11779] team0: Port device bond9 added [ 471.356436][T11816] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 471.365072][T11816] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.408928][T11818] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 14:39:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) 14:39:41 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x121002, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000001300)={0x0, 0x7, 0x81, r1, 0x0, &(0x7f0000000140)={0x9b0951, 0x101, [], @value64=0x5}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f00000002c0)={{0x3, 0x100, 0x7, 0x97c, 0x1, 0x3}, 0x2b3, [0x7, 0x2e8c, 0x1eb28734, 0x6, 0xfffffffe, 0x4, 0x8, 0xd815, 0x6, 0x87, 0x7, 0x8, 0xffff, 0x0, 0x4, 0x8, 0x5, 0x0, 0x3, 0x7, 0x0, 0x3, 0x8000, 0xfffc0000, 0x2c, 0x5, 0x10000, 0x5, 0x2, 0x10001, 0xfff, 0xffffffff, 0x8, 0x1, 0x1, 0x7, 0x9, 0xc0, 0x9, 0xfff, 0x7, 0x8, 0x5358, 0x5, 0x1ff, 0x1c, 0x7, 0x200, 0xd6, 0x6, 0x0, 0x40, 0x5, 0x7, 0x5, 0xff, 0x2, 0xfff, 0xb7, 0x9, 0x1, 0x43c, 0x6, 0x3, 0x1ff, 0x3f, 0x9, 0x80000001, 0x5, 0x7fffffff, 0x9, 0x1, 0xfe8, 0x8, 0x10000, 0x3, 0x7, 0x7f, 0x6, 0xfffffffe, 0x8, 0x1, 0x5, 0x18f6, 0x2b, 0xff, 0x3ff, 0x8, 0xffffff7f, 0x101, 0x100, 0x2, 0xc552, 0x7, 0x0, 0x800, 0x3f, 0xe08, 0x80, 0x4, 0x7068, 0xffff, 0x0, 0x2, 0x2, 0x82e, 0x0, 0x9, 0x9, 0xc0, 0x4, 0xfffffff7, 0x3f, 0x3ff, 0x5, 0x9, 0x4, 0x6, 0x8001, 0x7ff, 0x41f, 0x5, 0x5, 0x9, 0x8000, 0x4, 0x1f, 0x7994d99d, 0x7fffffff, 0x400, 0x7, 0x6, 0x101, 0x7, 0x5, 0x6, 0x8, 0x9, 0x1, 0xeeb, 0x138, 0x4, 0x3f, 0x1000, 0x800, 0xffffffff, 0x3f, 0x9, 0x4, 0x100, 0x0, 0x0, 0x20, 0x2, 0x9, 0x1, 0x95, 0x3, 0xbb, 0x4, 0x4b0, 0xffff7fff, 0x7, 0x8, 0x1, 0xfffff04a, 0x0, 0x8, 0x9, 0x9, 0x6, 0x1, 0xff, 0x401, 0x20, 0x5, 0x2, 0xc1, 0x5, 0x401, 0xff, 0x7fff, 0x1, 0x5, 0x7fff, 0x3, 0xe5f, 0x9, 0x3, 0x8, 0x0, 0x25, 0x1, 0x1f, 0x4, 0x3, 0x0, 0x800, 0x380000, 0x72, 0x800, 0x0, 0x3b02, 0x800, 0x100, 0x20, 0x9, 0x3, 0x7, 0x4, 0x7f, 0x7, 0x8, 0x9, 0x0, 0xe4, 0x40, 0xcdf, 0x3, 0x90b, 0x8, 0x3, 0x2, 0x2, 0xffffb7bb, 0x0, 0x9, 0x5, 0x5, 0xffffffff, 0x7, 0x7, 0x4, 0x6, 0xc34, 0x1, 0x7b1235a0, 0xfffffff9, 0x8, 0xff, 0x20, 0x8, 0x3, 0x0, 0x7de, 0x100, 0x6e4d, 0x0, 0x8, 0x3, 0x2, 0x7708d933, 0x4, 0x0, 0xd6, 0x3f, 0x9, 0x5a3a8ace, 0x99d, 0x5, 0x9, 0x4, 0x4, 0x1000, 0x9, 0x3f, 0x200, 0xf77, 0xfff, 0x2, 0x5, 0x1, 0x3ff, 0x400, 0x9, 0x3ff, 0x7fffffff, 0x20, 0x101, 0x6, 0x6, 0x3, 0x5853, 0x2, 0x8, 0x5, 0x28, 0x5, 0x6, 0xdb, 0x0, 0x5, 0x2, 0x0, 0x9, 0x8000, 0x2, 0x7, 0x1, 0xffff, 0x200, 0xfffffff8, 0x3, 0x0, 0xfffffffb, 0x3, 0x7fff, 0x1, 0x1, 0x5, 0x7fffffff, 0x100, 0x7d34, 0x9, 0x7642, 0x0, 0x6, 0x100, 0x5d0, 0x7, 0x2, 0x8, 0xffffffff, 0x7, 0x9, 0x8, 0x4, 0x8000, 0x97, 0x401, 0x5, 0x2, 0xcd, 0x40, 0x9, 0x6, 0xfffffffa, 0x3, 0x10000, 0x80000000, 0x9d, 0x4, 0x3f, 0x6, 0x4, 0x100, 0x563, 0x6, 0x6, 0x3, 0x9, 0x3f, 0x8000000, 0x2, 0x7fff, 0x0, 0x8, 0xfb, 0x80000001, 0x1295, 0x7f800, 0x81, 0xbaa3, 0xffff, 0x80000001, 0x0, 0x9, 0x2, 0xa, 0x101, 0x7fff, 0x6, 0x404, 0x1, 0x100, 0x1, 0xa2b3, 0x3, 0x1, 0x1ff, 0x4c10, 0x10000, 0x1000, 0x1, 0x7, 0x80000000, 0xeb41, 0x7, 0x0, 0xffff, 0x5e8fae8c, 0x8, 0xce, 0x3, 0x893, 0x2, 0x101, 0xdfb, 0x9, 0x57, 0x7, 0x200, 0x7fffffff, 0x0, 0x101, 0x40, 0x20, 0x0, 0x8000, 0x5, 0x7, 0x0, 0xfffffffe, 0x0, 0x852, 0x7f, 0x7ff, 0x7, 0x2, 0xfc93, 0x1ff, 0x1, 0x7fffffff, 0xdb2f, 0xffffffff, 0x2, 0xffff, 0x9, 0x8, 0x80000000, 0x1ff, 0x8001, 0x10000, 0x6, 0x5, 0x80000000, 0x6, 0x800, 0x6, 0x2, 0x2, 0x10000, 0x81, 0x100, 0x6, 0x6000, 0x5c, 0x4, 0x6, 0x80000001, 0x9, 0x9, 0x9, 0x6, 0x6, 0x4, 0x8, 0x0, 0xd50, 0xead, 0xfffffff9, 0xfffff594, 0x8, 0x7ff, 0x61, 0x5, 0x6cbe, 0x0, 0x3, 0x58fa, 0xba9, 0x5, 0x1, 0xffffffe0, 0x1f, 0x101, 0x9, 0x8, 0x22d, 0xd61, 0x4, 0xffff, 0x4, 0x1, 0x9, 0x1f, 0x7, 0x0, 0x56b, 0x80000001, 0x6, 0x1000, 0x40, 0x2, 0x101, 0x2b1, 0x41, 0x1ff, 0x4, 0xfda, 0xff, 0x1, 0x8, 0xfffffff9, 0x0, 0xffffffff, 0x7, 0x80000000, 0x1f, 0x6, 0x80000000, 0x40, 0xfff, 0x1ff, 0xf0d, 0x3, 0x9, 0x60eccda4, 0x3, 0x4, 0x6, 0x80000000, 0x9, 0x4, 0xc0000000, 0x5, 0xffffffff, 0x1, 0x8, 0xff, 0x8, 0x2, 0x1, 0x5, 0x6, 0xc0000000, 0x800, 0xffffff00, 0x200, 0xfffffffa, 0x7, 0x9, 0x5, 0x81, 0xfffffffd, 0x4, 0x4, 0x400, 0x0, 0x9, 0x9c, 0x9, 0xfffffff7, 0x7, 0x6, 0x200, 0x7, 0x9, 0x7fffffff, 0x6, 0x7fffffff, 0x400, 0x6, 0x100, 0xff, 0x8, 0x0, 0x5c76, 0x9, 0x12d, 0x30, 0x226, 0x1, 0x5, 0x80000000, 0x80000000, 0x1, 0x8, 0x3, 0x6, 0x5, 0x1, 0x0, 0x1f, 0x3, 0x752, 0xe3a0, 0x2, 0x2, 0x0, 0x3ff, 0x5f, 0x2c, 0x29, 0x7f, 0x7b3, 0x4, 0x6, 0xdbde687, 0x80000000, 0x649, 0x9, 0x0, 0x4, 0xe857, 0x7f, 0x6, 0x340, 0x7, 0x200, 0x8001, 0x1, 0x4, 0x0, 0x1, 0x145, 0x7, 0x1ff, 0x0, 0x400, 0x2, 0xc0000000, 0x80000001, 0x1f, 0xffff, 0x1, 0x6d5, 0x22, 0x3e0b, 0x1000, 0x6, 0x5, 0x25, 0x40, 0x3, 0x78c, 0x7ff, 0x3, 0x0, 0xfffffffd, 0x4, 0x2, 0x5, 0x0, 0x20, 0x3, 0x7ff, 0x20, 0x4, 0x1, 0x3, 0x4, 0x1, 0x1, 0xfab6, 0x1, 0x3f, 0x7, 0x4, 0x6, 0x7fff, 0x0, 0x401, 0x4, 0x7, 0xfff, 0x200, 0x3, 0x7, 0x71b6, 0x8, 0x9, 0x8, 0xbbd, 0x2, 0x8, 0x2, 0x5, 0xfffffffa, 0x85c6, 0x39800000, 0x0, 0x7, 0x1, 0x6, 0x3fb, 0x200, 0xfffffffc, 0x7, 0x100, 0x8, 0x1, 0x6, 0x2, 0x9, 0x0, 0xf, 0x7, 0x7, 0x1, 0xfc, 0x13, 0x8, 0x9, 0xffffffff, 0x90, 0x9, 0x6, 0x63c7, 0x4, 0x3b, 0x8000, 0x5, 0xffff, 0x9, 0x8, 0x84e, 0x800, 0xf905, 0x2, 0x5, 0x0, 0x6, 0x3f, 0x9, 0x5, 0x1, 0x2, 0x6, 0x3ff, 0x0, 0xff, 0x1ff, 0x2, 0xd6c, 0xfffffffa, 0x8, 0x6, 0x7, 0x0, 0x400, 0x8001, 0x10001, 0x80000000, 0x3, 0x7, 0x1ff, 0x16, 0x2, 0x8, 0xfff, 0x7, 0x3, 0x2, 0xdad, 0xcc, 0x8000, 0x10001, 0x7fff, 0xce7d, 0x3b6, 0xdaa, 0x7, 0x400, 0xfffff733, 0x6, 0x45c, 0x7fff, 0x8, 0x6, 0x80000000, 0x86e4, 0x5, 0x3, 0x6, 0x0, 0x1, 0x20, 0x0, 0x4, 0x40, 0x0, 0x7, 0x4000000, 0x1, 0xf4c2, 0x6, 0xffff, 0x8, 0x6, 0x3, 0x7fff, 0x44c, 0xf2c5, 0x0, 0x8000, 0x3, 0x8000, 0xfffffc00, 0x5, 0x0, 0x5, 0xfffff764, 0x8789, 0x9, 0x6, 0x2ffbd75c, 0x3, 0x8000, 0x80000001, 0xfff, 0x8, 0x4, 0xda, 0x4, 0xffff, 0x40, 0x8000, 0xcc5, 0x3, 0xffffffff, 0x95eb, 0xe50a, 0x5, 0x7, 0x2, 0xe57, 0x98, 0x3ff, 0x8, 0x7, 0x10001, 0x18f4, 0xf6, 0x1000, 0x5, 0x4, 0x9, 0x9, 0x1a5, 0xf80000, 0x8, 0x3, 0x6, 0x3, 0xfffffffb, 0x1, 0xb2e, 0x9, 0xfffffff7, 0x4, 0x1, 0x7, 0x6, 0xffffffff, 0x5, 0x5, 0x6, 0xffffffff, 0xffffff02, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x4, 0x8001, 0xf, 0xfff, 0x1ff, 0x4, 0x98e, 0x3, 0x626f593a, 0x8001, 0x3, 0x1, 0x5, 0x6, 0x5, 0x6, 0x2, 0x0, 0x3, 0x5, 0x1, 0x1, 0x0, 0xffffff8c, 0x80000000, 0x1, 0x4, 0xfffffffd, 0x0, 0x6, 0x5, 0x6, 0x7fff, 0x5, 0x3, 0x547, 0x5cc, 0xfff, 0x851, 0x1f, 0x3ff, 0x0, 0xda0, 0x1, 0x7, 0x348, 0x7f, 0x0, 0x80, 0x7f, 0x9, 0xaf, 0x8, 0x5, 0xc3a4, 0xb602, 0x100, 0x5, 0x3, 0x8000, 0x6, 0x0, 0x4, 0x76b5, 0x3f, 0x5, 0xffff8000, 0x1f0, 0x0, 0x10001, 0x1ff, 0xffffffff, 0xfffffffb, 0x8, 0x1, 0x7, 0x55, 0x5, 0x4, 0x6, 0x9, 0x0, 0x6, 0xffff0000, 0x9, 0x5, 0x7ff, 0x9c1, 0x80, 0x0, 0xfffffe01, 0xffff87e3, 0x1, 0x4, 0x3, 0x4, 0x3, 0x9, 0x1, 0x7, 0x1, 0x0, 0xfffffffd, 0xfffffffb, 0x9, 0x5, 0x6, 0x9e9f, 0x99, 0x6, 0x4, 0x10000, 0x759d, 0x9, 0x7ff, 0xe8, 0x20000000, 0x1, 0x4, 0x81, 0x8001, 0xfff, 0x2, 0xb479b1fd, 0x8, 0x80, 0xfffffe00, 0x4, 0x6, 0x40, 0x4d1a, 0x8, 0x20, 0x5, 0x392a, 0x1, 0x80000000, 0x8000, 0x7, 0x7, 0x8, 0x52, 0x7, 0x5d63, 0x7b, 0x141, 0x10001, 0x1, 0x7, 0x6, 0x426, 0x31c, 0xcd4, 0x66, 0x431, 0x1, 0xad, 0xcd6, 0x3ff]}) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x8, 0x0, 0x0, &(0x7f00000000c0)={0xa23}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 14:39:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x28}}, 0x0) 14:39:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) 14:39:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:42 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x121002, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000001300)={0x0, 0x7, 0x81, r1, 0x0, &(0x7f0000000140)={0x9b0951, 0x101, [], @value64=0x5}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f00000002c0)={{0x3, 0x100, 0x7, 0x97c, 0x1, 0x3}, 0x2b3, [0x7, 0x2e8c, 0x1eb28734, 0x6, 0xfffffffe, 0x4, 0x8, 0xd815, 0x6, 0x87, 0x7, 0x8, 0xffff, 0x0, 0x4, 0x8, 0x5, 0x0, 0x3, 0x7, 0x0, 0x3, 0x8000, 0xfffc0000, 0x2c, 0x5, 0x10000, 0x5, 0x2, 0x10001, 0xfff, 0xffffffff, 0x8, 0x1, 0x1, 0x7, 0x9, 0xc0, 0x9, 0xfff, 0x7, 0x8, 0x5358, 0x5, 0x1ff, 0x1c, 0x7, 0x200, 0xd6, 0x6, 0x0, 0x40, 0x5, 0x7, 0x5, 0xff, 0x2, 0xfff, 0xb7, 0x9, 0x1, 0x43c, 0x6, 0x3, 0x1ff, 0x3f, 0x9, 0x80000001, 0x5, 0x7fffffff, 0x9, 0x1, 0xfe8, 0x8, 0x10000, 0x3, 0x7, 0x7f, 0x6, 0xfffffffe, 0x8, 0x1, 0x5, 0x18f6, 0x2b, 0xff, 0x3ff, 0x8, 0xffffff7f, 0x101, 0x100, 0x2, 0xc552, 0x7, 0x0, 0x800, 0x3f, 0xe08, 0x80, 0x4, 0x7068, 0xffff, 0x0, 0x2, 0x2, 0x82e, 0x0, 0x9, 0x9, 0xc0, 0x4, 0xfffffff7, 0x3f, 0x3ff, 0x5, 0x9, 0x4, 0x6, 0x8001, 0x7ff, 0x41f, 0x5, 0x5, 0x9, 0x8000, 0x4, 0x1f, 0x7994d99d, 0x7fffffff, 0x400, 0x7, 0x6, 0x101, 0x7, 0x5, 0x6, 0x8, 0x9, 0x1, 0xeeb, 0x138, 0x4, 0x3f, 0x1000, 0x800, 0xffffffff, 0x3f, 0x9, 0x4, 0x100, 0x0, 0x0, 0x20, 0x2, 0x9, 0x1, 0x95, 0x3, 0xbb, 0x4, 0x4b0, 0xffff7fff, 0x7, 0x8, 0x1, 0xfffff04a, 0x0, 0x8, 0x9, 0x9, 0x6, 0x1, 0xff, 0x401, 0x20, 0x5, 0x2, 0xc1, 0x5, 0x401, 0xff, 0x7fff, 0x1, 0x5, 0x7fff, 0x3, 0xe5f, 0x9, 0x3, 0x8, 0x0, 0x25, 0x1, 0x1f, 0x4, 0x3, 0x0, 0x800, 0x380000, 0x72, 0x800, 0x0, 0x3b02, 0x800, 0x100, 0x20, 0x9, 0x3, 0x7, 0x4, 0x7f, 0x7, 0x8, 0x9, 0x0, 0xe4, 0x40, 0xcdf, 0x3, 0x90b, 0x8, 0x3, 0x2, 0x2, 0xffffb7bb, 0x0, 0x9, 0x5, 0x5, 0xffffffff, 0x7, 0x7, 0x4, 0x6, 0xc34, 0x1, 0x7b1235a0, 0xfffffff9, 0x8, 0xff, 0x20, 0x8, 0x3, 0x0, 0x7de, 0x100, 0x6e4d, 0x0, 0x8, 0x3, 0x2, 0x7708d933, 0x4, 0x0, 0xd6, 0x3f, 0x9, 0x5a3a8ace, 0x99d, 0x5, 0x9, 0x4, 0x4, 0x1000, 0x9, 0x3f, 0x200, 0xf77, 0xfff, 0x2, 0x5, 0x1, 0x3ff, 0x400, 0x9, 0x3ff, 0x7fffffff, 0x20, 0x101, 0x6, 0x6, 0x3, 0x5853, 0x2, 0x8, 0x5, 0x28, 0x5, 0x6, 0xdb, 0x0, 0x5, 0x2, 0x0, 0x9, 0x8000, 0x2, 0x7, 0x1, 0xffff, 0x200, 0xfffffff8, 0x3, 0x0, 0xfffffffb, 0x3, 0x7fff, 0x1, 0x1, 0x5, 0x7fffffff, 0x100, 0x7d34, 0x9, 0x7642, 0x0, 0x6, 0x100, 0x5d0, 0x7, 0x2, 0x8, 0xffffffff, 0x7, 0x9, 0x8, 0x4, 0x8000, 0x97, 0x401, 0x5, 0x2, 0xcd, 0x40, 0x9, 0x6, 0xfffffffa, 0x3, 0x10000, 0x80000000, 0x9d, 0x4, 0x3f, 0x6, 0x4, 0x100, 0x563, 0x6, 0x6, 0x3, 0x9, 0x3f, 0x8000000, 0x2, 0x7fff, 0x0, 0x8, 0xfb, 0x80000001, 0x1295, 0x7f800, 0x81, 0xbaa3, 0xffff, 0x80000001, 0x0, 0x9, 0x2, 0xa, 0x101, 0x7fff, 0x6, 0x404, 0x1, 0x100, 0x1, 0xa2b3, 0x3, 0x1, 0x1ff, 0x4c10, 0x10000, 0x1000, 0x1, 0x7, 0x80000000, 0xeb41, 0x7, 0x0, 0xffff, 0x5e8fae8c, 0x8, 0xce, 0x3, 0x893, 0x2, 0x101, 0xdfb, 0x9, 0x57, 0x7, 0x200, 0x7fffffff, 0x0, 0x101, 0x40, 0x20, 0x0, 0x8000, 0x5, 0x7, 0x0, 0xfffffffe, 0x0, 0x852, 0x7f, 0x7ff, 0x7, 0x2, 0xfc93, 0x1ff, 0x1, 0x7fffffff, 0xdb2f, 0xffffffff, 0x2, 0xffff, 0x9, 0x8, 0x80000000, 0x1ff, 0x8001, 0x10000, 0x6, 0x5, 0x80000000, 0x6, 0x800, 0x6, 0x2, 0x2, 0x10000, 0x81, 0x100, 0x6, 0x6000, 0x5c, 0x4, 0x6, 0x80000001, 0x9, 0x9, 0x9, 0x6, 0x6, 0x4, 0x8, 0x0, 0xd50, 0xead, 0xfffffff9, 0xfffff594, 0x8, 0x7ff, 0x61, 0x5, 0x6cbe, 0x0, 0x3, 0x58fa, 0xba9, 0x5, 0x1, 0xffffffe0, 0x1f, 0x101, 0x9, 0x8, 0x22d, 0xd61, 0x4, 0xffff, 0x4, 0x1, 0x9, 0x1f, 0x7, 0x0, 0x56b, 0x80000001, 0x6, 0x1000, 0x40, 0x2, 0x101, 0x2b1, 0x41, 0x1ff, 0x4, 0xfda, 0xff, 0x1, 0x8, 0xfffffff9, 0x0, 0xffffffff, 0x7, 0x80000000, 0x1f, 0x6, 0x80000000, 0x40, 0xfff, 0x1ff, 0xf0d, 0x3, 0x9, 0x60eccda4, 0x3, 0x4, 0x6, 0x80000000, 0x9, 0x4, 0xc0000000, 0x5, 0xffffffff, 0x1, 0x8, 0xff, 0x8, 0x2, 0x1, 0x5, 0x6, 0xc0000000, 0x800, 0xffffff00, 0x200, 0xfffffffa, 0x7, 0x9, 0x5, 0x81, 0xfffffffd, 0x4, 0x4, 0x400, 0x0, 0x9, 0x9c, 0x9, 0xfffffff7, 0x7, 0x6, 0x200, 0x7, 0x9, 0x7fffffff, 0x6, 0x7fffffff, 0x400, 0x6, 0x100, 0xff, 0x8, 0x0, 0x5c76, 0x9, 0x12d, 0x30, 0x226, 0x1, 0x5, 0x80000000, 0x80000000, 0x1, 0x8, 0x3, 0x6, 0x5, 0x1, 0x0, 0x1f, 0x3, 0x752, 0xe3a0, 0x2, 0x2, 0x0, 0x3ff, 0x5f, 0x2c, 0x29, 0x7f, 0x7b3, 0x4, 0x6, 0xdbde687, 0x80000000, 0x649, 0x9, 0x0, 0x4, 0xe857, 0x7f, 0x6, 0x340, 0x7, 0x200, 0x8001, 0x1, 0x4, 0x0, 0x1, 0x145, 0x7, 0x1ff, 0x0, 0x400, 0x2, 0xc0000000, 0x80000001, 0x1f, 0xffff, 0x1, 0x6d5, 0x22, 0x3e0b, 0x1000, 0x6, 0x5, 0x25, 0x40, 0x3, 0x78c, 0x7ff, 0x3, 0x0, 0xfffffffd, 0x4, 0x2, 0x5, 0x0, 0x20, 0x3, 0x7ff, 0x20, 0x4, 0x1, 0x3, 0x4, 0x1, 0x1, 0xfab6, 0x1, 0x3f, 0x7, 0x4, 0x6, 0x7fff, 0x0, 0x401, 0x4, 0x7, 0xfff, 0x200, 0x3, 0x7, 0x71b6, 0x8, 0x9, 0x8, 0xbbd, 0x2, 0x8, 0x2, 0x5, 0xfffffffa, 0x85c6, 0x39800000, 0x0, 0x7, 0x1, 0x6, 0x3fb, 0x200, 0xfffffffc, 0x7, 0x100, 0x8, 0x1, 0x6, 0x2, 0x9, 0x0, 0xf, 0x7, 0x7, 0x1, 0xfc, 0x13, 0x8, 0x9, 0xffffffff, 0x90, 0x9, 0x6, 0x63c7, 0x4, 0x3b, 0x8000, 0x5, 0xffff, 0x9, 0x8, 0x84e, 0x800, 0xf905, 0x2, 0x5, 0x0, 0x6, 0x3f, 0x9, 0x5, 0x1, 0x2, 0x6, 0x3ff, 0x0, 0xff, 0x1ff, 0x2, 0xd6c, 0xfffffffa, 0x8, 0x6, 0x7, 0x0, 0x400, 0x8001, 0x10001, 0x80000000, 0x3, 0x7, 0x1ff, 0x16, 0x2, 0x8, 0xfff, 0x7, 0x3, 0x2, 0xdad, 0xcc, 0x8000, 0x10001, 0x7fff, 0xce7d, 0x3b6, 0xdaa, 0x7, 0x400, 0xfffff733, 0x6, 0x45c, 0x7fff, 0x8, 0x6, 0x80000000, 0x86e4, 0x5, 0x3, 0x6, 0x0, 0x1, 0x20, 0x0, 0x4, 0x40, 0x0, 0x7, 0x4000000, 0x1, 0xf4c2, 0x6, 0xffff, 0x8, 0x6, 0x3, 0x7fff, 0x44c, 0xf2c5, 0x0, 0x8000, 0x3, 0x8000, 0xfffffc00, 0x5, 0x0, 0x5, 0xfffff764, 0x8789, 0x9, 0x6, 0x2ffbd75c, 0x3, 0x8000, 0x80000001, 0xfff, 0x8, 0x4, 0xda, 0x4, 0xffff, 0x40, 0x8000, 0xcc5, 0x3, 0xffffffff, 0x95eb, 0xe50a, 0x5, 0x7, 0x2, 0xe57, 0x98, 0x3ff, 0x8, 0x7, 0x10001, 0x18f4, 0xf6, 0x1000, 0x5, 0x4, 0x9, 0x9, 0x1a5, 0xf80000, 0x8, 0x3, 0x6, 0x3, 0xfffffffb, 0x1, 0xb2e, 0x9, 0xfffffff7, 0x4, 0x1, 0x7, 0x6, 0xffffffff, 0x5, 0x5, 0x6, 0xffffffff, 0xffffff02, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x4, 0x8001, 0xf, 0xfff, 0x1ff, 0x4, 0x98e, 0x3, 0x626f593a, 0x8001, 0x3, 0x1, 0x5, 0x6, 0x5, 0x6, 0x2, 0x0, 0x3, 0x5, 0x1, 0x1, 0x0, 0xffffff8c, 0x80000000, 0x1, 0x4, 0xfffffffd, 0x0, 0x6, 0x5, 0x6, 0x7fff, 0x5, 0x3, 0x547, 0x5cc, 0xfff, 0x851, 0x1f, 0x3ff, 0x0, 0xda0, 0x1, 0x7, 0x348, 0x7f, 0x0, 0x80, 0x7f, 0x9, 0xaf, 0x8, 0x5, 0xc3a4, 0xb602, 0x100, 0x5, 0x3, 0x8000, 0x6, 0x0, 0x4, 0x76b5, 0x3f, 0x5, 0xffff8000, 0x1f0, 0x0, 0x10001, 0x1ff, 0xffffffff, 0xfffffffb, 0x8, 0x1, 0x7, 0x55, 0x5, 0x4, 0x6, 0x9, 0x0, 0x6, 0xffff0000, 0x9, 0x5, 0x7ff, 0x9c1, 0x80, 0x0, 0xfffffe01, 0xffff87e3, 0x1, 0x4, 0x3, 0x4, 0x3, 0x9, 0x1, 0x7, 0x1, 0x0, 0xfffffffd, 0xfffffffb, 0x9, 0x5, 0x6, 0x9e9f, 0x99, 0x6, 0x4, 0x10000, 0x759d, 0x9, 0x7ff, 0xe8, 0x20000000, 0x1, 0x4, 0x81, 0x8001, 0xfff, 0x2, 0xb479b1fd, 0x8, 0x80, 0xfffffe00, 0x4, 0x6, 0x40, 0x4d1a, 0x8, 0x20, 0x5, 0x392a, 0x1, 0x80000000, 0x8000, 0x7, 0x7, 0x8, 0x52, 0x7, 0x5d63, 0x7b, 0x141, 0x10001, 0x1, 0x7, 0x6, 0x426, 0x31c, 0xcd4, 0x66, 0x431, 0x1, 0xad, 0xcd6, 0x3ff]}) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x8, 0x0, 0x0, &(0x7f00000000c0)={0xa23}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 14:39:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x28}}, 0x0) 14:39:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 14:39:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000100)={0x4, 0x2, 0xa1d, 0x0, 0xffffffff, 0x19, 0x7f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000140)={'ipvlan1\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = eventfd2(0x80000000, 0x80800) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 14:39:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x28}}, 0x0) 14:39:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000a40)='/dev/vcsu#\x00', 0x6, 0x802) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f00000007c0)) bind$inet6(r0, &(0x7f0000003800)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="1d13cc4faa4db215579d6cb1aea046f069ac4c2adb4fcd84fe531c954deaff46f2708b", 0x23}, {&(0x7f00000001c0)="c3135405fe897303bc1ac23c26167ae497b6003f34b82330ddc23b8cc78496969d211414fa5eacd34e15592be8024f9842a8", 0x32}, {&(0x7f0000000200)="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", 0xfe}], 0x3, &(0x7f0000000340)=[{0x48, 0x113, 0xfffffffe, "6b50ba2a959c3feb12447b7ec37cf260fd4e36beafdf7fbc920f93e769f8d86693cd1112300c8be4e04334ca07ab7b1e89d3af"}, {0x20, 0x10e, 0x80000001, "5077350fbb6eba9bc0"}, {0xf8, 0x117, 0x5, "d4cc300677a59a3e8fc0949a218a1ca2dc5d5bfceb01794594340b69c20d54039587219ed2b6e2b91e36e8c49c59ddb8de4f9ab246c3b7b9799f6b03c7913f00dbcaa7f49b3aa6696dc96bee4b10b3a7bb9183e120ad74c6f0f4bef77c5614b1d245a5b0f7136c4ddbc2647bd92aaa2a103140dfb4c7e8bb34d647415893a04147419e61f32e5f89fad99928d2a921eb53873650ec66ee6059a0c960658823ba1a14838c5d7d29f1fd8c21df44418dbe5dcfae40f803bce17599551554db31be6d50787f9c85de83cfc271f53f05b5034dbf32b29c9a7ece35a9614e8f8f66d301c93660e94e1f"}, {0x88, 0x10b, 0x800, "d2202cdd9d32fc3677f6b2d1e6337622a3615c5c6ee287d9efc75024421c6e0a64025dec61b47eb5231b66c81c3c568b9fc08f88d5e4a35baeac4e0b1e09709b588e3aa6185b072e76080f7ed34dad6866ca0e534e5b41322e5625d74e44634d986eef16839af4c085efdc20e34e9ecf4f6a55d8"}, {0x18, 0x10b, 0x5, 'i'}, {0x60, 0x0, 0x3, "83b7f8dbf2f4d78d59b4694d733429bae6d0331eab7a9c0e7e4522e621798a28d750dc6d43252fc98ffea02345fa54efc74e4bb7a2b670ca5638e26bd60179e9ff8540db2297dbe8a2fcc8719435da97"}], 0x260}}, {{&(0x7f00000005c0)=@caif=@dgm={0x25, 0x80000000, 0xff}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000000640)="52cf1553caffb73b543360248c3d8a8e6dab4866906cc87f5ce49c4b8cd36a8e509d6dc0872555554d17f8838daa62028b10c912618f73a0d7eca503cb50c49e5a00cb4d8a21956c80481e768d89af33da2f6d621784a1d2bc9fec4fd6cd3622bbe60943b2dd0084a0ff3abb38c680458d8ebc6804267f95f41090744f97340dab1a756ac53d082ea6432e8fe2100b7efc40a99aba50e49b6d02a70fa315dc97b4cb2207b6384f17cef5be142010d693d044723f9f772107ecd4", 0xba}, {&(0x7f0000000700)="61721f874443021a80c8508f42f61623609015ffb6b3abafac14e936ee13e644a4606874fc167a4e4b4eb8b2c4de65d9afea0633c81cc757c3b02cc90b21d8fc1b05f3d1d0b41e4339fa5948a22b5afa2e5a310ed906663f30ed1795f4fcc08a156144a9812fd5c40d95b97de8057b90ce6128ec1f4baeb88ae237cae76d0dd769dc216fdb8949aee76df6709a5e9a42d105c8ec1a337eea259f63a22aaa6c061df08334a465cd4c66a40ede7600", 0xae}], 0x2, &(0x7f0000000800)=[{0xb0, 0x108, 0x9, "b79d35b1b2ea98667803b05fca6082ed777bea7f3ba0bb76291925da6d222a6ae225f852aa48d828bb52cc495b49d8b980105d55bbf221faa124677b96f0df6772d623341d308faae17eadd90aaeca70632e06c214d338c063ea92db700a974beb84027b05ff8173639e8502150585e285dbcf1b6ed8c3a469dde098e7acfc0d8e0248965eb4a2dfddc121d031a537e45683f1f10b1ac6808fdf4ffa41"}, {0x78, 0x118, 0x45, "d76904066276e86c84bb4b0c41b818b573d868b72fe4963367e88bbb6cf0f804d4c248762a1f1712618bf47289f36b372d2b93e47e353687a2c2e3d2898c5897026dfd7da160f496034f37aa91ac5e2f7c0af53914e600f27ac28d5e030250715d"}, {0x28, 0x0, 0x3f, "ec2477411612ef3d005ada1c7fb5d0003e1677f567"}, {0xf0, 0x10c, 0x0, "5a7bb35728b5e4cdfc1c95596c603422f114dde0aa671a5997748066ad915cfb9d751d389de7b1ff8944bf80f3a2565a49e1e3dbd954581879383e8f1913e48c107d7db40c393f53faa1f2e42cea73314b7077708ce596d136c3cb024d1768a7354872245000c14753ac24b8ea429f527e394ec5d3e16a7b097bebb5da869ddcc77d7135148219b01a4cacd6806b00f06ca92d14cbed26b305e8965b11cdc13ba67224c1209c190c2757e822333a8810787cc53cec4c6fcddfd87dd9b2fcbc122dbb9a329d68ad2e6bb9f6e893c4d94d0cd655df5f52cf03cecd63"}], 0x240}}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e20, 0x738625e, @remote, 0x8001}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="1d9c5e44469404ee21e9fdb1128276bb3b6a73ddf616bf0bfd00b3c27b42e31a64876cbe2c653838d08056", 0x2b}, {&(0x7f0000000b40)="b321034282a6665245119cd8087c86b19e35a12682349836df29f1d22a0a7011c30f52bfad57738a3f9d3858", 0x2c}, {&(0x7f0000000b80)="1255666fb8568c9c5d3be010bb16981f35fdd188a69bdad8b311130bf463d4d3b0137699a3a82b75dd8650e5e3f0cebe430cad6b142546a3d7f80ca48ce68d9a2853bcee532e342584ac1c719ba26e10a453257aa4ded01b05248bc9b8c709fee76501cbd184b1bf4db830c33205826d8afc0360", 0x74}], 0x3, &(0x7f0000000c40)=[{0x40, 0x1, 0x9, "94bb13b71d8a4b132e602d9fa7f1f2358ffc3524951733502a0c2c62b12f153071fe74cee854fcaa733761321c8785"}], 0x40}}, {{&(0x7f0000000c80)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000d00)="dd51d8ba2043de352c370165afafc40aed971b", 0x13}, {&(0x7f0000000d40)="18a818906185652391a5c20c8e6377a4987a2f26bb04f26213fb3104e233837ed20d5317c6d8832a94b5d14403f41607a0556e1a768db0c7ccac51e480839de39d1adbefed49fb", 0x47}, {&(0x7f0000000dc0)="28e2fd731acc25492b81a0f18a350b967b16c3b00c4f61bd50aaa1e6a537216b67c497adb478c5dc25bedf86f661961513099774f10afba2f6e130f4b553895c512aa5e6a4ce3dc4323956b6df7b0fe67ec1129892c05831717a505f4b11a9c4721f379a0527a8fee5e05ad59b624e1bad6d6e10742fb706ae61fe954cd55dab2b7790f9fde2230aa60a6b7e31b5fde3945bf66a2144142998e3f46c76886c772d0f0b98358cf48f90b87dbafcf54a2284d28b907ca819a7605ee175b6844a2a", 0xc0}, {&(0x7f0000000e80)="88a2b214f5576f4c5687af959c9fce67845c1fc75d7ed76141d0ed7748274ea14177c912d6fb7501c48a96ac0a710daf76d20c1e60606c1a2a4f2b0aafc7b56cec42ca48d653ac7043dd849646e22b247f19801f6b5ac759a86d11e6a9cc1d3d46e4a48640e7427ccbf01649e57bb98445042703047a5e168ed96b74eb7c83c1ee008e683683069d478cd489862ed9d041c07c824ed83e2dba8bb22b225d1764bbc4079dde81565e412e0a54b572de335de0a8fea10a8a6d4163368aa1d89bc09c4599b3632320fca1045d7ab0d1a61b6eca18e748956fc23288309c63e45f2c7b1ce091cc595b16faefe412687a8d8c22c8b6ac", 0xf4}, {&(0x7f0000000f80)="e413293f25dede9889a81ac8bc48078dfd8966a9b9d92672e68a", 0x1a}, {&(0x7f0000000fc0)="3f02", 0x2}, {&(0x7f0000001000)="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", 0xfe}, {&(0x7f0000001100)="c355e551b66be46cc3e0a9496d0303b383817362917fbd93ed82621e8a4c800635cd49a53d9bc18df0608c82d1e6a9f2fb9c2e5ce7da4478d357a2a978d6884f233e72ba3b6b582c4850cad0b20bb985fc0bca26baf5ebbbec107826f3579c", 0x5f}], 0x8, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x2f8}}, {{&(0x7f0000001500)=@pppoe={0x18, 0x0, {0x3, @remote, 'bridge_slave_0\x00'}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001580)="27dfbf", 0x3}, {&(0x7f00000015c0)="871320614280a7726402f2222902e10808fff2e4ebe7e851ea9d5aa2765830b15d7af2fece296c0e7b983a75ae7abc41858286da87f1de61dedab4fc3dabf443f91dc176a4a67bb4df1491f50776f198352c186758ba8b98d08d60f735346f635642559fe7bd0517536a5d15f380b39e38ba11ed49b4ed3d4d31561e4df1897cac9b6ae4ce37d249aed005c8e042468da27547a3d34fb56ef00fdcb22faaf7df13d32abdd9a9da0a01fa588782888ba8ca198fc5fd9563a204cae134dd7c76358f716870695923c67e42085b767659a2280bd6b9059344e58975ab06cd41b66310b7400824b15c23f2a8ff34e790ebfa333ee6f244c4e6da2e00fa4a485d3c921c9a6d8ebac050a3a13aa1a8d454998fcf689fe83cf91551d69ee410ec4ef285edb7bf5e559514328f36a0f9661ad6ee428b4d277a15c8c5ab31fae0c54c92e9a4c25df567ea318daf022520079c76418b08cce8782a211245b422301b0175b5430958e36a105172f258d04b1cfda452cb1d1ef4654d11f67855f24c640fd038d107caeabe0a0693a162092f84854f09186863532afddc82c10690a4871814fb6c806f5bc7860e5ab70ec94b3b030b2c00955bb71ceec0125f1989f39a5bb6168b2f0ff40f8a513e941e72f4fb505acc1a4b9a471340e701762e2813afb42b35622bfc4c731c6035820fb8ce0c04a55aa418f4aa3129bd0652228dc68eda3e5fee7d61cb357aab1374c3268d56531c9495101f90700a1275d50fc353ec3f51409e1dafd7e11c9ed915fe0db6a3b5c37438aa117f4c3bb92c4be5696cba961c65ece232e00dd9f708a3c6fb442ac1a2f853c656eebda3f42390d7e2e4be9dadfd55ac6a0f68209c851538d64c32fd0a7eb435ee44cb53623b104cfb47a34cae01cdbd1bed1dd25b8d8fb3caa1c6205156bb57e151dc9d6be46d565e47da78c84826dadf07f9a6b2bc9752fb981a78b14a2784e8c815521edee71806ff80ab67616e563543742206147dbd2f7c734df9efd09d1c58a9fdc79e6feb3cc0e584cc0667852f687ee58996d17bf70955f642cdabaaced09b288a50455fc2e77804e3b92ecfd5cd540b34bf00aaaa104f1a8208787d425f61981db0de56f80409cc89ac06fd8088ea94d190b8dd6a3ac945e17a4b75d7b46a2502284fc004daf85a18d42c79b23630a85facd44b1950fda59150a4d3d577a4f3b426099d1044a16654bf92c15510af0e46955e317fb738582c7c65f494a7097e717323f948c39a2583f736739443dae086f172b1456162793bf08d1ae49603e59707be899390ee580af519184d483c0e2a1ae7927666e350ba5451f3c258311ab8f770ba821799902ef4537f6852d867c51037b86322fc24fd327f8d4a9a9085197e697009948c4486caf69a87db62af906901781ac045358ee56fcad85a665a684b9c621f7e226af2ae4e1b059656aa83425f0eaafeea8430e44e8a86f2bc151e93d8899e446b05300d37877252e9b2d7b1ce514af4546399a4f7a04593c9d19547bfe0f01aeef57b44a548c14ad1ca5b8437078f11de9eb4bdec2024e460edaeb1ce6212a82b3b0480cd059f0af1500728ea2f2b6698befbe9cfb252c51bc2831ca522856cf68998ca9a15cc75c4a858877231b0eb785e99bba148f2e17f930cd2d7db1efff87fdf28d3bffaf16ffaee3bcdbacdbd5191515ebb6f070beb3032bbf2ca763503904d0f00bc032b79cda0ce304606b515a30fe22a41c433a63aa3d65d3200066faa26cbef9a7b676dec12a8313411cfb4dd9a4222d8ec6478cd94febf5fbff4390e7db5bf4fd1d2001816009d98fa3af6d3b4193237e41be975896b5a650e2ba951e59f3a83cdfb14c2299c500806119265f500ab54df1b4fb051479c0a112f78216a01292708c379526766c3b6e9461131c327ee74195d735c1ba0e3f9ee0815c257e28dc2ed79f094acaf5c787261c3ad447cfd106400a30e00e57ee2333533216a01e7503b3c59ec533cf90f5d4fb1d803e43f72ca369bc7d0a748760ba8469132c634547e228ade3fe01ef02c1ba48acf83fca8369fe52321f7d9defe6f24a550e41f1080b61932c690ed7181af8d2f0db30494630caaeb41c4c7780aa1db989a4556bf849e132c2c1687a2946280ab9bb3e5d4317e4d04f4d132c5c40028bed3b35a6f202872a2e87c9136c5a345f462cfa882a803edb91086ba20af93ca25c807999b8abc82af86c124bd880a50a784642d851e5e802d41920c599c93551830ec9b332f42cbe01a52c0b6cb57640706dacc02826f1ee19d04c9e3350bb003df1143f30b6f07f69e7aaf8ef8d98c46a7a56c14b4a98e0f288538fabcde67f3bb7c0370634eb37ac0ce36c8d68898ccc562a22ce4040eef34121cea2a4b442d1da92d01bc9b01f64b08aed888ea46fa4f1fe65939de1039900d4330995757a90a9d899bb228efec4c0b270445962e208f209771d69b799d4e6bb372dd773926faa8c9d00a27b50273b3f5786483ff75543c8e49a0043120fe03f2a5a28ce25fd36e72e0c6a0793c40c18b00831591791c8e22617b0c59a55edb46086cc9339204628bacae22d18e8840cdc0d6c537d907f3485dce30f72685e3f324c4f7b4767273ffa8ed8b4b93d673c71e295170f05a52c48897a8105fdedab180ab0565e2bcc62a9ed5838835e13b9cc31d2cdf641d1248270ff4e59162f8e0bdbaa12b71e5e2293a0fc96cb7ab798e3f0c4f435df466d0e38bb3fe04c25cd948f84fa903ceef8aaaf05d577655f7c806303c7d07550b1d465f2ff81c972f029de09ead9ddddce1d4d22973bde8ed86b6915c059b2508aded9b5537f0d1cbed5a3a78b899227671d2ae3088ccd9477b10c28f503d0b391a9307a5ee85a9bb2a0120aa14313b89910c6c2be270011cf41ec14616b1e3cf16a97fabc49a3419a08a70a7bbe25d3c9ea218943f1f364b4cc7b7faf8414608f7efb9580d12524fb9d861b15dd21f5eb2cdfbe25d243c0c85888744a35029574830263b903f6409388b1e510f43a3b5c2e5b10a4af9db70107723f0fac7b16549d3a1c33d98bb9c5c4c57e751a86bb6add2e491a36b5286b668c70a49afd61267489890f7ad4ab8d22ad26268734990990025569319568213a59f5c56b0de9af20c1a0e3ff57a1fdbfd12e1405c1998ff28b66626969746befa776de4544349f0967d60399b4321e84394f950c0182978113b4ed0f7bf0893c4e2d2457efbc4a355d7bc1fbddef632a65c06bd6de6393bd62f099c3a8d5893b2eb66a5635121e2cbeb7c64737e444d8e7618f0214e6c6ac9d26f9710a55b1ee5219ec84a02f5ae753e91328d8be9be2a3ef021f2e90fd901166e5b80c648c71e5b6126b20fada753d12d035b272fb227146aa476bf9c380ed09f77d001f009bba1b0ca2cd2c6173df20aafa9d422787d415783fe2a3d11f7f57352c5d9895d32118ec1589bb4147c03dcb8294e45ab7b607c80bb23d5bb55d3e324cd2011d7fc7b4352c3c60e1831a835b672f30803beab043f13770838c88fa243213116e2f829f2455d6f62c00e1d9bf7898f7703789ca2dfca376c84ff5fea18e414d160f592d7564527e90c04c43a53925499508c138cd6136d856f93b32f3275b5a7fc63e2d90e1279047f9a062725336a90f574519904824032f5b4f45e3a4c6004fadfea7cb41529fc5a061e095f69db92b6585dd937eac174c75ca5c65d0bd506f980b98f2e2c2c03a2e0a705f4053cf049e8c97093623ba0ba137eb49d04781b4e736e2b1b8746d646b7ba943aaceaa17b79635c922868716830d2312ae5f420e930773998c907212ccb500385a4159361bfe46f60e1b64e810f5f6000f535d4ce33bf03ccaa136b06e290632389d7589cf64d8b87f67889f4ca3bf32e92e2038026afa5ccf078c0dbda8ccc3bffbe8d623ae07a9ab1141d34a4a0c107490f45dfcb83e552b5dc9eb51c905697629de7fc3358fa4ba0d5c1e9315b5754aa14683eefe96a3cb4ae609289a1f324ad9490a50f44233627ab782d36012dbdbd7a298a6ce135ee47cc30c873152dfa7d6d49488fd83b3ccd3ea20d9555ee011e726f56982ba35733ae64c99f19c4833c0207ac568776fc146568dad1e94340825dd0a3354e6ed4e4831d6ba68fe2271c49c5a9c48c5e4c6af4b19f182652a5df0709869c182ba7951d17e6a7c204bfb5cfb24a2821992c81d8e0234339ab844becddb2bd200b216f8f5ea1523c62bc2724e8fbe29d647a8c474b7ad68208342479e1133ea618b859bc8fc7e6d4eb9c02b45b81c17e32a3f72e8ab8d14dde9115891bc074c8a2d336662899388159ea558fbac03f4704a1758b98f38800b424b77474e37876abbd12aeeef2926712c947b31727e9f4287db4bde728222be51555c37788cf018a81a5896b874ad1f9b64d347ea1260fc00025b45030285d2d120e4ece3eda672f8164b64ba6d2d0a88055b7c2fb6a2502b7c5b91ef77dce4b3a39e3ff6b8f2f95897519e503e1f90f77ab125345f4ce53f0141679d26005c92e882144a49441417475674eb8be2286bc8072be61e4754f166809e5738b6e201094bbc93304b74fc659857bc0ca492eb0c03c36c57b2db36d5c104a712006da663443725b6a0eb9ecc0628d03356bbcb41ec6f45b779a394121ca25c09917fed191239d8bf9fb16fcaa185a5608d4d382a7a9ebdaa5e329848a84e738f998814e1f2a5dee804314aeb4e1917a84ec233dfb10116a3103fea1359ba2b82e8696a4ac4b333ed68ec119f67499c1b4ef67e5d3e326b1684a9c3c96c3be10280bd843c6921349250c6176ddc3696cc07ef48faff64a0296d4b2cf5725a07d0129255295bdf6b2e4d562b765254ba79971f3f8cec9880eafb366bd34ee461b040fb6ccf2d49cbf272abc9abd44dfece78eff479cd169d37dd07e0eb31875e40dad23a52ef0c9568d88cc83c5ccd3858c50f25c129c681fba7bb3632cc1604daa0e89b00e91df6b14e90197f17a7cf101022ef6b0faed37e8c95b23e07201a62a87109bbc274d9073a341ce5f38b1cc829ed7b3a0446ec5ac922898d48a3b9d8fb4581f6f845ba8fbb1049813e9253a755b54a9730826408be5bda0f5005b67fc8c2048b7dc244f1149bc575dc562888d1923985907ccf5bc0932b847812d6a0f92807c6eefa49a790a1dd2a2be5cf79181f52ed38153539129add60175b7f16d74a2ac0424dac2784192c47d451732e414f36c05ade5e0a70c5316754c4d6dd37f8749bc4651581039340c47a07590edfec603007076c3cfe72ae14e0d74074a14a10e956b0f433aac51e2c4febe47b5b52e795cf1eb337c8f3f923ce3c35153d88a2b401107f84f5004297d11c54246b98634c261d7d43a67da15ae6a4dddf6cb31b618f49f8278293ed18a2e2abfc8b044910d7a893106c3b9a9d745ac3d3ba2ae6b6f6977727dfb58811e504b06e6be64195ba549d6d5ae1e61a95e5a46414fc289ede563904f45d27e02830491d3b8403f0eac379bea4a8bdd228286fca08beab4bcf792c5f1d305ddd1a1d7353fe215282559c9497ea28ea85689f7558f12d01559316fd496a6d862b792ef3bde90b19ebc158f0bc676e2c86020fe45b97ab8a0b739ecbb6f6826498b0e0e025c3b645a2ce2f7baa2ac75cacf06b09e9cc6418c9614b99bcf305e07a5b77a34863fa45104e06da618ec7ca907657bc070da08c33653a4d008de47a5b7878b5dc246d159f4c91fb7abb50d3917c32dc951fd8678095f21fefff701975a8e57346cf512ce8881c71d53f637f1e9ff13", 0x1000}, {&(0x7f00000025c0)="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", 0x1000}], 0x3, &(0x7f0000003600)=[{0xa8, 0x119, 0x5, "3c4e1cd96adb6dfa0ce2670bc897231cef9017a1165950d1b21a1801d9bcab947adc77af73cab2de7e5922059c3532769ce23e6b2721ad3da0eeec1e4e94f4f445c45ebbb5849f2dbb2b2e3b56c2773d57f5ea67b74342480e6f53023b7f872f0089f1db45a6533644b4559532a2adfec143070581f6c607a46eba19f8c1b988c79d1e64b36351127302974517f05c7b0cbc7428417f83cb"}, {0xa8, 0x2b, 0x6, "52a2c54ca13ed8c830ed66b6588b4c68f71ac4123c1c5db3918e96f5bfa3f2106b6d3d4ddb24d82193cf6d5e3f80d6d9b52d643900534e68c91dbaf10145421aae759b06a1085cf5ca07e6493c2a37aaf73cb6e92921acdfa7a7c4f9d5e279b319e214fee74dc07c9e52cbd95aa6341a788af3a502ab1e6af8aa0cbf95386b944f85925fd4ac5f187344e666b9f5a9008224d07a6b05eb"}, {0x30, 0x192, 0x20, "9421ffa3c6215a2e1ddd165be9446183c98854c6f6699de13a9119d2ed"}], 0x180}}, {{&(0x7f0000003780)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004bc0)=[{0x40, 0x100, 0x2, "ea00efa57230cc1a7e31699316b16636a97e7bebc00443aa78ff2d3579312b60b846f6b1a8926fccad4bb9dc408b0d82"}, {0x1010, 0x105, 0xab, "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"}], 0x1050}}], 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x43}, 0x10000}, 0x1c) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:39:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) [ 473.655286][T11932] validate_nla: 4 callbacks suppressed [ 473.655320][T11932] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="90ae7bb0ac000040", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250e00000008000500000000000c0001800600010002000000080004000600000008000600080000001c00018006000100020000000600020004000000060004004e210000080004000500000008000500000000002c00028006000e004e20000006000b000200000006000e004e24000006000e004e2000000800040000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4044494}, 0x1353e5ca4fca200d) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='autogroup\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10001, 0x3) fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "5f27d98d5a1e38a9b95edca3789de03f"}, 0x11, 0x1) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000040)={0x7, "fc61266eea60e7c3f11fc48da869021abb93b21bd1ba484db667bb270dd5a79b", 0x1, 0xffffff81, 0x3, 0x2, 0x30, 0x2}) ioctl$CHAR_RAW_FRASET(r5, 0x1264, &(0x7f0000000200)=0x7) 14:39:44 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e7ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x12d, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x24004010) mmap(&(0x7f00006d2000/0x1000)=nil, 0x1000, 0x1, 0x4010, r1, 0xcacab000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f00006d1000/0x10000)=nil, 0x10000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x2414}, {r1, 0x8}, {r0, 0x8719}], 0x3, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x21]}, 0x8) [ 474.001809][T11938] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) dup2(r0, r3) 14:39:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 14:39:44 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "69dea846fd"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008d0}, 0x4000) 14:39:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r0, 0x0) r1 = accept(r0, &(0x7f0000000040)=@un=@abs, &(0x7f00000001c0)=0x80) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000200)=""/2, &(0x7f0000000240)=0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x80000001, 0x200}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="2d392c08cc0f9a71232a04c8d07ce5000000001057b86e8c6dd95fb45efeeea0993565527d55152c55d378c3b3039049f6d3b6dea5e86a30621596a103a24e12595600000000007286cfe0c51f724ddba76c694dbb2f738bd9fa1ea94b02420fadb32025ab087504a47789ab296d2964c19f8e67416da25167806106f515961d602eabff0a5fef608bd65d5c31ce32671cc8bf99b4765f3a", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x40000}, 0x30) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sync_file_range(r3, 0x793, 0x3, 0x3) close(r0) [ 474.776583][T11986] FAULT_INJECTION: forcing a failure. [ 474.776583][T11986] name failslab, interval 1, probability 0, space 0, times 0 [ 474.789858][T11986] CPU: 1 PID: 11986 Comm: syz-executor.1 Not tainted 5.9.0-rc4-syzkaller #0 [ 474.798617][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.808735][T11986] Call Trace: [ 474.812130][T11986] dump_stack+0x21c/0x280 [ 474.816587][T11986] should_fail+0x8b7/0x9e0 [ 474.822703][T11986] __should_failslab+0x1f6/0x290 [ 474.827742][T11986] should_failslab+0x29/0x70 [ 474.832436][T11986] slab_pre_alloc_hook+0xd5/0x590 [ 474.837589][T11986] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.843490][T11986] kmem_cache_alloc_node+0x118/0xdf0 [ 474.848885][T11986] ? __alloc_skb+0x23b/0xb30 [ 474.853627][T11986] __alloc_skb+0x23b/0xb30 [ 474.858169][T11986] netlink_sendmsg+0xdb9/0x1840 [ 474.863141][T11986] ____sys_sendmsg+0xc82/0x1240 [ 474.868120][T11986] ? netlink_getsockopt+0x17e0/0x17e0 [ 474.873592][T11986] __sys_sendmsg+0x6d1/0x820 [ 474.876274][T11990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 474.878311][T11986] ? fput+0x82/0x320 [ 474.890416][T11986] ? kmsan_get_metadata+0x116/0x180 [ 474.895789][T11986] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.901709][T11986] ? kmsan_get_metadata+0x116/0x180 [ 474.907021][T11986] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.912926][T11986] __se_sys_sendmsg+0x97/0xb0 [ 474.917700][T11986] __x64_sys_sendmsg+0x4a/0x70 [ 474.922572][T11986] do_syscall_64+0x9f/0x140 [ 474.927185][T11986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.933142][T11986] RIP: 0033:0x45de89 [ 474.937128][T11986] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.956815][T11986] RSP: 002b:00007f46f4f89c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.965328][T11986] RAX: ffffffffffffffda RBX: 000000000002e5c0 RCX: 000000000045de89 14:39:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) dup2(r0, r3) [ 474.973380][T11986] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 474.981434][T11986] RBP: 00007f46f4f89ca0 R08: 0000000000000000 R09: 0000000000000000 [ 474.989487][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.997655][T11986] R13: 000000000169fb6f R14: 00007f46f4f8a9c0 R15: 000000000118bf2c 14:39:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 14:39:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:45 executing program 4: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000003}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x62000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000440)="cfbba60022e3477e21e107b18fbc1527ff28f7c7de948a9b4276b546980e538b00ec63b129c103d32c", &(0x7f0000000080)}, 0x20) creat(&(0x7f0000000200)='./file0\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x4, @mcast1, 0x2, 0x1}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xe8, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 14:39:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) dup2(r0, r3) [ 475.784142][T12036] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) [ 475.967482][T12064] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 475.977133][T12064] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 476.003181][T12064] bridge0: port 3(veth3) entered blocking state [ 476.009687][T12064] bridge0: port 3(veth3) entered disabled state [ 476.018834][T12064] device veth3 entered promiscuous mode 14:39:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0xe9b, @mcast2, 0x6}}, 0x0, 0x0, 0x41, 0x0, "0dbe3497473e9ef66dbbd6539b0e5d103d7dc4d9482107aa77cd773948ca07dd577ce2a3cb256473bdee23be5ec19f3ac249e2831b38af57ce9dd36e856e729e9902981827c7b70a80c12cba27ca16b1"}, 0xd8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 476.303775][T12083] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:46 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7311000220009b12c31eae7547d5ee5c2f358cfed7c436310650cf2c52a84b72eb0cc870e03136190c24dc7bc1836d355f743d08fef0f3f2b47fe03e01a5b78e6613dc38bbd079c193c58263f39b7a68d5159ba9800b38fb5b1557503d528fd71eb275fe067a3201b40600000000000000bbc67d8d369eab0f7d809d284f187fc376a7d72d041ae79f2b5eb12dc1eee895a5184612246b6551e825903495c1e9081f4a5dea94532b57e470f48d8dc5edccec3a246d850adb0e3a72749942944e7275a713b2159b8cdf8a2a5102f1eb21201b8e459eafa35a538bc6c51f3e5edb4020d59303740dfaa3bc4743ed259ad7e9e5"], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 476.423607][T12087] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(0xffffffffffffffff, r2) 14:39:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x24008091) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={{0x0, 0x0, @identifier="1865dc78e479235ac836b6fba725e0c3"}}) 14:39:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 14:39:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(0xffffffffffffffff, r2) [ 477.162104][T12136] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 477.234423][T12140] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 477.511605][T12146] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(0xffffffffffffffff, r2) 14:39:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000040)=0x5, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x2, r3}) r5 = userfaultfd(0x40800) ioctl(r5, 0x7, &(0x7f0000000080)="2aa7c26522ede53fa4996b20704e7de6f102e2623e79dbea912a71adf43f80a2ea0700c874bfc3d72dd8c7af84151b6d1a72fca1a6751ba92c57ef992f975e00a4dca41f5470ba0f0117b9fe62baa560c5ded70a9a766a0155f0ab53e4c365b5845715a13a776d647f2ccabaf323615c8a3f0ed8a5e921e5d16b1d72a72df6ccdc27432ee9295bebc0ab4252d76cf9e798dc96298f44dcbe9a75fda877a7aac64d8375719659605a176e57ae636aee5cc7333215b4298d48128ba2ba6648b27dca06a9f2ed") pread64(r1, &(0x7f00000001c0)=""/102392, 0x18ff8, 0x103f00) pread64(r3, &(0x7f0000e3e000)=""/6, 0x3b, 0x7) [ 477.994284][T12186] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 14:39:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, 0xffffffffffffffff) 14:39:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x680c, 0x80000001, 0x8001, 0x6, 0xfffffffd}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f00000001c0)=""/102400, 0x19000, 0x103f00) 14:39:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x10, 0x1f}) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0xcda2, 0x3}) 14:39:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x74, 0x400300) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 14:39:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, 0xffffffffffffffff) [ 479.830146][T12243] validate_nla: 2 callbacks suppressed [ 479.830180][T12243] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 480.040379][T12245] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, 0xffffffffffffffff) [ 480.220457][T12290] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x5, 0x6, 0x201, 0x4, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x1dfb) splice(r0, 0x0, r4, 0x0, 0x47fde, 0x0) 14:39:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc9}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7b0b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x89}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040011}, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:50 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) [ 480.923893][T12304] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 480.984943][T12308] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 481.033868][T12309] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:39:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000001c0)={0x6c, 0x3e, [], [@jumbo={0xc2, 0x4, 0xfffffffa}, @generic={0x40, 0xcd, "de69acd697aa542fd555c84c672247c96838aa1b41db021d47957a8391824db17afc091ab0fe7ec2e075084e745068fcb59a6eb15df0174b0e46b17389cc4d0a587cb445e86b2d619a14959e3b90c51ad4ddebbfb9aac7a4ffa0ea567b481d9aa101a4e492ae9c43b8665ee7da333b42331a559d4f6b6737cc52151e0d3d1f9cafc72b771797615630482da325165c91650cc77de4d00ea5a454769a3df8820dfdbe206beb1e0f0300d2036493833f3485da7bdc763c8d96257ce9700ae7a26973687bd35bb8532b417914433c"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x9, [0x6, 0xc000000000000000, 0x200, 0x4]}}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x48}, @generic={0x20, 0xea, "4af5c1586175d7c1c4e49b3b3e23eeab309f2b0a4f39e745eeefb7b9c9d1fc21cc4447532755b30eaf430990b0b2260cf1a5fb5478e6a69b7c2970335ca7df478fdbf6bf5dc4d4b6f501031321ca167e25a33a3e89803052bc61956530cb3443d7697bbb863495d4ff6ebad6ff169881200001baf41fc4ea3b7501de74fa5c82aa6edd5cc3382bf880e9b2bdff4d5ece75fe9c72364c71d4bfa9d2b821abfe06e38e6c20a3c942690128cf2c20f85375e823f70b9c23b8b0be492b4cb742652973f202a18243ed6cc5f20021570a2b7659403cee7c19d947e65e10e7757ff427e59cbdf08fb099fdd418"}]}, 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 14:39:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:39:51 executing program 4: r0 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='user.syz\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffff8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0, 0x0) [ 481.758131][T12354] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$caif_seqpacket(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x8000, 0x0, 0xc2, 0x1f}, {0xa2ff, 0x68, 0x81, 0x9}, {0x20, 0x2, 0x3f, 0x5}, {0x2, 0x3, 0x20, 0x6}, {0xf8, 0x6, 0x7, 0x79}, {0x4, 0x3, 0x1f, 0xe38a}, {0x8000, 0x4, 0x3d, 0x3}, {0x7, 0x4, 0x9, 0xbe9}]}) sendfile(r0, r5, &(0x7f0000000140)=0x80000001, 0x3) [ 481.869389][T12359] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 482.050584][T12361] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e02020025000535d25a80648c63940d0424fc600c0018400dac0f0004ac0f4037153e6709020f8003001700d1bd", 0x2e}], 0x1}, 0x8800) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x80000, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r2], 0x1) pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) 14:39:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x121000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x80, 0x4, 0x5, 0x4, 0x9, 0x8}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') dup2(r0, r4) [ 482.533623][T12410] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:39:52 executing program 5: request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0xffffffff, 0x7, 0x6, 0x80000000, 0x10, 0xc74, 0x3f}, &(0x7f0000000180)=0x9c) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0xfffffff8, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={r0, 0x9}, &(0x7f0000000240)=0x8) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000280)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x59bb]}, 0x8, 0x80000) connect$netlink(r1, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc) r2 = dup2(r1, r1) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000004c0)={0x8}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x8400, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000540)={0x3, 0x6}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000580)={0x0, 0x100}) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000005c0)) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000600)={@mcast2, 0x9, 0x1, 0x0, 0x2, 0x5, 0x1}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0xb5e99656fefcd7ee, 0x0) 14:39:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) fcntl$dupfd(r2, 0x0, r0) 14:39:53 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:53 executing program 4: 14:39:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:39:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='mountstats\x00') dup2(r0, r4) 14:39:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0xfff, 0x0, 0x4, 0x1, 0x6, {}, {0x4, 0x1, 0x1, 0x1, 0x81, 0xf9, "3d35d490"}, 0x9, 0x4, @fd=0xffffffffffffffff, 0xa8c}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000000)=0x10000) pread64(r4, &(0x7f00000001c0)=""/102390, 0x18ff6, 0x1103f00) 14:39:54 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:54 executing program 3: msgsnd(0x0, &(0x7f0000000040)={0x2, "4afb0ee2cf19d1fa5c2d29969558360d026ada764136aec437bcd14c815ba1721f92c3da1578e425e377f2aa9c923af398dc1deaf7b2e34a99faa79b737dc124dbbb3c989ae41baa682e42af2096159b1854f33919395e21e5f98dc279c5abd48f24634f26714e1c8a59f77655a97d25132383607562e2930c616ae89e2121b30ebd7928776b0de7f0c0d6e72bc2f0be57c640cdefa83159d18a452889a8f47aaa829dff8a1de9456ec4225952a0b18a129798"}, 0xbb, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0xffffe999, 0x4) dup2(r0, r3) 14:39:54 executing program 4: 14:39:54 executing program 0: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x6d, 0x5, 0x3}, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x31a8d3f396928f8b, 0x4) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f00000001c0)=""/102400, 0x13094, 0x103f00) 14:39:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 486.346427][T12474] IPVS: ftp: loaded support on port[0] = 21 [ 486.684457][T12474] chnl_net:caif_netlink_parms(): no params data found [ 486.871845][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.879021][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.889789][T12474] device bridge_slave_0 entered promiscuous mode [ 486.902101][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.909230][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.921052][T12474] device bridge_slave_1 entered promiscuous mode [ 486.967153][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.983485][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.028820][T12474] team0: Port device team_slave_0 added [ 487.039588][T12474] team0: Port device team_slave_1 added [ 487.081694][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.088791][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.115406][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.132087][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.139114][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.165905][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.220910][T12474] device hsr_slave_0 entered promiscuous mode [ 487.233520][T12474] device hsr_slave_1 entered promiscuous mode [ 487.244522][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.252284][T12474] Cannot create hsr debugfs directory [ 487.481714][T12474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.503100][T12474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.535085][T12474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 487.555878][T12474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 487.560307][ T8729] Bluetooth: hci0: command 0x0406 tx timeout [ 487.791861][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.819064][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.828009][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.849195][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.869403][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.879183][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.888677][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.896034][ T9831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.940987][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.950588][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.960545][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.969360][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.976753][ T9831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.985594][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.996827][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.007307][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.018310][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.039803][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.053176][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.064366][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.090970][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.103542][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.117978][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.128244][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.152840][T12474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.196135][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.200235][ T8729] Bluetooth: hci5: command 0x0409 tx timeout [ 488.205857][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.235160][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.284571][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.294488][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.344106][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.355479][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.377404][T12474] device veth0_vlan entered promiscuous mode [ 488.385897][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.395632][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.424791][T12474] device veth1_vlan entered promiscuous mode [ 488.487013][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.495897][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.505526][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.515186][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.540680][T12474] device veth0_macvtap entered promiscuous mode [ 488.566847][T12474] device veth1_macvtap entered promiscuous mode [ 488.606563][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.617731][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.627802][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.638400][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.648458][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.659095][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.669242][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.679860][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.689741][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.700368][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.712901][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.721723][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.731230][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.740681][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.751657][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.783016][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.794182][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.804247][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.814891][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.825148][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.835950][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.846016][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.856745][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.867149][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.877805][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.892226][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.901009][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.911153][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.952265][T12474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.961256][T12474] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.971954][T12474] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.981253][T12474] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.342854][ T715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.350923][ T715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.380274][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.456954][ T8720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.464948][ T8720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.473969][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:39:59 executing program 5: 14:39:59 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x5, 0x0, [0x6, 0x1, 0x101, 0xffffffff, 0x6], [0x7, 0x3, 0x1, 0x81, 0x9, 0xb, 0x5c1a, 0x7, 0x4, 0x7fffffff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x5, 0x10000, 0x7, 0x4, 0x9, 0x401, 0x4, 0x1, 0x100000000, 0x9, 0x6, 0x3, 0xfffffffffffffff8, 0x7, 0x0, 0x3f, 0x2, 0x9, 0x2725, 0x3, 0x800, 0x100000000, 0x40, 0x6, 0x65, 0x1, 0x8001, 0xc0, 0x8001, 0x3f, 0x7ca, 0x100000000, 0x6ce, 0x771, 0x0, 0xb7f, 0x3ff, 0x9, 0x1000, 0x5, 0x8, 0x6b49, 0x7, 0x7, 0xfff, 0x2, 0x7ff, 0xe3, 0x401, 0x10000, 0x7bf, 0x755e, 0x9, 0xffffffff, 0x2, 0x6, 0x6c, 0x362, 0xfff, 0x9, 0x5, 0x7, 0x401, 0x5, 0x3ff, 0x6, 0x0, 0x8, 0x80000001, 0x8, 0x7, 0x7f, 0xfca1, 0x5, 0x3, 0x9, 0x4, 0x3, 0x7, 0x9, 0xffffffff00000000, 0x5, 0x400, 0x8663, 0x2, 0x6, 0xfffffffffffffffa, 0x3481, 0x4, 0x6, 0x4f1683a7, 0x3, 0x3f, 0x7, 0x6, 0xffffffff, 0x90a, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0x5]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:39:59 executing program 4: 14:39:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/4, 0x4, 0x103efc) 14:39:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x4008040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r2, r5) 14:39:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 489.870707][T12711] validate_nla: 5 callbacks suppressed [ 489.870742][T12711] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 490.026157][T12721] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:00 executing program 4: 14:40:00 executing program 0: 14:40:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x40002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 490.283936][ T8732] Bluetooth: hci5: command 0x041b tx timeout 14:40:00 executing program 5: 14:40:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xdb9, r1, &(0x7f0000000080)="14bb6dbe20dfc6674959fc065a46b3ae9eb51f77d782bf6507a24b578509db6b4c1f8aa5653a48aef03b118c24e488cff782d70fc6640c53bfa5fd8d955d92461508d89fb8d278b5c53040bc2e13536d97d5282fb805e18f306f2012ae5922a2b697a7781d2c53b61f4d8395c02668f7d4a0f4df85a48c6ac2a4df62cb95a85b0acd6767ccf18ba758b63f1a96901750cbcb4774e5679d97424b2058c812c2d475c5e6f4d9cbf6f97a5e235948d2faa894ed", 0xb2, 0xf3c9, 0x0, 0x2}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff95ad}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf0f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) r6 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000200)=0xe9, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x48}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r8) 14:40:00 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0022ffff"], 0x24}}, 0x0) 14:40:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0xd0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0x1b8}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 14:40:01 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) poll(&(0x7f0000000400)=[{r0}], 0x1, 0x0) [ 491.058324][T12736] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 491.154339][T12740] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000e80)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=[@hoplimit_2292={{0x14, 0x29, 0xffd8}}], 0x18}}], 0x2, 0x0) 14:40:01 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') pipe(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4048, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x40008c1) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x400c0) 14:40:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3c87bb07eb78c27b061773f04a2082ba8cedf8510e63fb112cf6956e09d1938ef3b217e0f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x400100132, 0xffffffffffffffff, 0x0) pipe(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000040)="a663f3cb268109f6eb4f5724bcbe848a", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd09) [ 491.911107][T12762] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:02 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @private=0xa010100, {[@lsrr={0x83, 0x7, 0x7, [@remote]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "5782ed", 0x0, "0dab16"}}}}}}, 0x0) 14:40:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) [ 492.360569][ T8733] Bluetooth: hci5: command 0x040f tx timeout 14:40:02 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0)='mptcp_pm\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r0, 0x0) [ 492.529690][T12778] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 492.620483][T12781] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:02 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=[{0xf}], 0x10}}], 0x2, 0x0) 14:40:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:03 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00)='nl80211\x00') bpf$ENABLE_STATS(0x20, &(0x7f0000000c00), 0x4) 14:40:03 executing program 5: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 14:40:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 493.250565][T12797] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:03 executing program 0: [ 493.378587][T12802] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:03 executing program 4: 14:40:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:03 executing program 5: 14:40:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:04 executing program 0: [ 493.982203][T12815] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:04 executing program 4: 14:40:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:04 executing program 5: 14:40:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 494.440809][ T8733] Bluetooth: hci5: command 0x0419 tx timeout 14:40:04 executing program 0: 14:40:04 executing program 4: 14:40:05 executing program 5: 14:40:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:40:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:05 executing program 0: 14:40:05 executing program 4: 14:40:05 executing program 5: 14:40:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 495.602069][T12846] validate_nla: 3 callbacks suppressed [ 495.602105][T12846] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 495.738979][T12850] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:06 executing program 0: 14:40:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:06 executing program 4: 14:40:06 executing program 5: 14:40:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:40:06 executing program 0: [ 496.388744][T12861] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 496.481888][T12865] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:06 executing program 5: 14:40:06 executing program 4: 14:40:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:07 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000000000)) 14:40:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 497.095743][T12875] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:07 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 14:40:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x1, 0x40000142, 0x0, 0x0) [ 497.189805][T12879] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010a000000000000000000000000090001007300090002"], 0x2c}}, 0x0) 14:40:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:40:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:07 executing program 5: r0 = socket(0x2, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1002, 0x0, 0x0) [ 497.799092][T12892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:40:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/254, 0x29, 0xfe, 0x1}, 0x20) 14:40:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20010040) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, ')\'\\-,)%\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '@[(#{&{}\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000081) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r2, r5) [ 497.939425][T12895] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:40:08 executing program 0: r0 = socket(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x119, 0x7, 0x0, 0x0) [ 498.062712][T12899] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0a0006007f92234454790000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r6, 0x504, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ffc000, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x24070004) 14:40:08 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/57, 0x1012000, 0x800}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 14:40:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000000301"], 0x40}}, 0x0) 14:40:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:40:08 executing program 0: socket(0x1e, 0x2, 0x0) select(0x40, &(0x7f0000000480), &(0x7f00000004c0)={0x8}, 0x0, &(0x7f0000000540)) [ 498.858167][T12914] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 498.938089][T12921] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.958809][T12924] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:09 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000000)) 14:40:09 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={0x0}}, 0x0) 14:40:09 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@local, @empty, @private0, 0xfffffffc, 0x9, 0x82, 0x600, 0x0, 0x200000, r3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r4, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x6f2ad138ba36fc04}, 0x40000) 14:40:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x32, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:40:09 executing program 0: r0 = socket(0x22, 0x2, 0x2) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 14:40:09 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/57, 0x1012000, 0x800}, 0x20) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x80000000) 14:40:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000000)={0x2, 0x97, 0x5}) dup2(r0, r2) 14:40:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x0, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:10 executing program 0: r0 = socket(0x2b, 0x1, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 14:40:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3a, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:10 executing program 4: socketpair(0x26, 0x5, 0x0, &(0x7f0000000240)) 14:40:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/165, 0x1}) r6 = syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x404081) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) 14:40:10 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x2, 0x5, 0x2, 0x0, 0x1, 0x0, [0x6]}, 0x40) 14:40:10 executing program 5: r0 = socket(0x29, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 14:40:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x0, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:10 executing program 4: [ 501.036516][T12982] validate_nla: 4 callbacks suppressed [ 501.036550][T12982] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = dup2(r0, r3) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="f6030000fe89882e8be28a37c85bb4eb39cb8884133cdc71ec8a6f888dd7762843fa6ff357ef0b", @ANYRES16=r9, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r9, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r7, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2d, 0x19, 0x6, 0xfffffff9, 0x32, @remote, @remote, 0x80, 0x0, 0x200, 0x7}}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0xfffffd8c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x0, 0x38, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) 14:40:11 executing program 0: [ 501.190178][T12986] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:11 executing program 5: 14:40:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x0, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 14:40:11 executing program 4: 14:40:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:12 executing program 0: 14:40:12 executing program 4: 14:40:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r3) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r3, 0x0}]) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x200080, 0x2, 0x4}, 0x18) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000540)={0x6, 0xffffffffffffffff, 0x1}) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') io_submit(r4, 0x2, &(0x7f0000000700)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0xbc4, r10, &(0x7f0000003300)="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", 0x103f, 0x80, 0x0, 0x3, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x4, r9, &(0x7f0000002300)="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", 0x1000, 0x8, 0x0, 0x3, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xc12c, r7, &(0x7f0000000300)="94209eb2e5676bf8ef717c621156c4b6020d2f1b2da84bae48fe8f848218ffb47190e5984cdabe1eee17dae6e8eff7b2060927b10b984ab4185bd1c0139a713b9913b85a6997689d74a5f51ca89dcf0cdf022a959ec52d69ae45aca523753e1a6e3ff19777bd8e42866aecdca2eccd43629089e595222ec0f1466e3ae391b21907a1d083d705e214642625a8908442f1147f18a25b25e51c3847e6d35d22f0519ef696fa7534d796562c3640f4fda4c4e3a3c98fdfeaa5e57a097bfc221e6258bedfe72ada", 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x8001, r2, &(0x7f0000000440)="ccbb756f6477b157c98c1ac0c22f4009115824d623996d8054afc6a1b1e79b622ca70e30c44a4687e60d96968dbbd30de4918ec9b73f43daa35ae7f1ac0ed72375b97b6488c51318ea2a815c1ed11d1f1e97a0c63fc9db97c32040ae01083f8abe8d96830ec0339cfd17ebba370e78acaf6497d4a9e16f65d8511c2b22cc68be6b5fe4f7bf42f55670a0f0dec2", 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x4, r10, &(0x7f00000005c0)="af01ff210749e7a3ab82bbb2024a8c15ebb56a7d4973ba7a38afdca1a9a8986b3764ce034a45401368e13270339b86893994da51a0016b6fed72465ad3a94c2815ebe08f8dd3adcc088d82ff0fc6d2e81440ad1d9307028890dfa878d949ae6d5752e71daf77d653cd075b8e822bfe3ec29042ec68ab5f5efdacd5bdcc4365ffc006b79f81551a73ecaa20e9e337ef462c870d0fd7179869643ee3a1d21a788c7e4c53e4bb20697b03d1712c6394134e22181bd986ebf5295ceba0ddd628051fdf2c4969762c2b8b6f934ecb8ed22fafbd94b201522d", 0x0, 0x9, 0x0, 0x2, r5}]) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000216b1bbfd61100ccccb2a545f1f59f9555ce51640556aefdd9dd5022c827f4afa4bc7", @ANYRES32=0x0, @ANYBLOB="2578053259d71b1602e5b58e2b0918b1568315cf9612"], 0x1c}, 0x1, 0x0, 0x0, 0x8808}, 0x20000002) dup2(r0, r11) 14:40:12 executing program 5: 14:40:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 502.170154][T13000] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 502.252636][T13007] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:12 executing program 4: 14:40:12 executing program 5: 14:40:12 executing program 0: 14:40:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0xc0045005, &(0x7f0000000300)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x111000, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40801) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r5) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f00000000c0)) 14:40:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) [ 502.920276][ T8733] Bluetooth: hci1: command 0x0406 tx timeout [ 502.941139][T13019] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 503.030334][T13023] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:13 executing program 4: 14:40:13 executing program 5: 14:40:13 executing program 0: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) 14:40:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101100, 0x4, 0x2}, 0x18) ioctl$RTC_AIE_ON(r4, 0x7001) dup2(r0, r3) 14:40:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) [ 503.540942][T13034] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 14:40:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x801}, 0x14}}, 0x0) 14:40:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7}]}, 0x28}}, 0x0) [ 503.821881][T13038] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet(r0, 0x0, 0x0) [ 503.960998][T13046] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) 14:40:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:40:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev}) 14:40:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:14 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @isdn, @l2tp={0x2, 0x0, @remote}, @rc={0x1f, @none}}) 14:40:14 executing program 0: clock_adjtime(0x0, &(0x7f0000000580)={0x7fff}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16d, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0x170, 0xa8, 0xffffffff, 0x0, 0x170, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, &(0x7f0000000080), {[{{@ip={@local, @multicast2, 0xffffffff, 0xff, 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @gre_key=0x2, @icmp_id=0x65}}}}, {{@ip={@local, @local, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'bridge_slave_1\x00', {}, {}, 0x8, 0x1, 0x8}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @gre_key=0x7ff, @gre_key=0x9}}}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'sit0\x00', 'lo\x00', {}, {}, 0x29, 0x0, 0x23}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x60, 0x860, 0x1, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@private=0xa010102, @private=0xa010100, 0xffffff00, 0xff, 'veth1\x00', 'veth0_to_team\x00', {0xff}, {}, 0x8, 0x3, 0x67}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1e, @multicast1, @multicast2, @port=0x4e22, @gre_key=0x8}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x1000001bd) 14:40:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) 14:40:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x401, 0x0, "4bec4a62a84f96869c179a68d0a2632aae160326492883960ce6d6089168ca460ee945f6df242c0c4868c5328fb93719336ebd51f8fa5b1e666dfe24bac8a44727d521cd1598551f2f2296fc7e897185"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) [ 504.707304][T13063] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000e80)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) [ 504.823773][T13066] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 504.961698][T13073] x_tables: duplicate underflow at hook 1 14:40:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 14:40:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}]}, 0x4c}}, 0x0) 14:40:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0xc0002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x2}], 0x18) 14:40:15 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000340)={[0x2, 0xff, 0x6, 0x200, 0x8, 0x8, 0x8000, 0x8, 0x40, 0x18000000, 0x8, 0xffffffff, 0x8, 0x80000001, 0x998c, 0x0, 0x3, 0x7fffffff, 0x1, 0xfffffffa, 0xd5ae, 0x7f, 0x7, 0x7, 0x8, 0xc6b8, 0x3, 0xfffff001, 0x8000, 0xb4b, 0x8, 0x1, 0xfffffc01, 0x6, 0x7, 0x12, 0xfffff001, 0x4, 0xfffffc01, 0x9413, 0xc03, 0x0, 0x4, 0x942c, 0x6, 0x901, 0x1, 0xf1, 0x9, 0x4, 0x1f, 0x1, 0xcd5a, 0x3, 0x2, 0x80, 0x2, 0x7, 0x7fffffff, 0x6, 0x81, 0x80000000, 0x6, 0x6, 0x800, 0xffff8001, 0x7, 0x3410, 0x6, 0x1ff, 0x8, 0x6, 0xff, 0x8, 0x5, 0x9, 0x3, 0x1, 0x5, 0xe2, 0x100, 0x9, 0xda2, 0x7, 0x401, 0x5ed7598f, 0x25, 0xfffffffd, 0x9a7, 0xe252, 0x80000001, 0x80000001, 0x1, 0xa4, 0x8, 0x0, 0x80000000, 0x8, 0x71a, 0x0, 0xe00000, 0x800, 0xe49, 0xfff, 0xfffffff8, 0x101, 0x5db64b17, 0x2, 0x401, 0x2, 0xea, 0x2, 0x4, 0x8, 0xffffffff, 0x10001, 0xffff, 0x4, 0x8, 0x3, 0x30000000, 0xfffffffe, 0x1, 0x8, 0x7a58, 0x9, 0x101, 0x5, 0x8, 0x1000, 0x6, 0xfffffffd, 0x3, 0x3, 0x800, 0x4, 0x4, 0x9045, 0x6, 0x2, 0x3, 0x3, 0x6, 0x3, 0x3, 0x80000001, 0x2, 0x1ff, 0x8, 0x4e9, 0x101, 0x6, 0xfff, 0x1, 0xff, 0x3, 0x9, 0x94b, 0x8, 0x80, 0x7fff, 0x8001, 0x5, 0x2, 0xa54, 0x10a0c7c8, 0x2, 0x8000, 0x7, 0x7, 0x8, 0x3, 0x3, 0x6, 0x9, 0x9, 0x7, 0x30f7, 0xfff, 0x9, 0x0, 0x62, 0x9, 0x0, 0x3, 0x30, 0x7fffffff, 0x5, 0x8, 0x1, 0x40, 0x8001, 0x40, 0x0, 0x5, 0x5, 0x5, 0x80000000, 0x857, 0x3, 0x80000000, 0xff, 0x8000000, 0x7, 0x7, 0x900, 0x1, 0x2, 0x1, 0x8001, 0x1, 0x1f, 0x9, 0x8, 0x2, 0x4, 0x3ff, 0x2, 0x401, 0x7, 0x9, 0x80, 0x4632, 0x8, 0x800, 0x88fe, 0x2, 0x8, 0x40, 0x5f, 0x7, 0x657, 0x800, 0x2, 0x4, 0x3, 0x3f0c, 0x9b, 0x4, 0x1ff, 0x401, 0x8001, 0x0, 0x7, 0x6, 0x3, 0x20, 0x6, 0x7f, 0x8, 0x0, 0x7, 0x3ff, 0x7fffffff, 0x0, 0x607, 0x7, 0x6, 0x1, 0x1f, 0x6, 0xe, 0x5, 0x6, 0x80, 0x100, 0x7fffffff, 0x1, 0x1050, 0x3, 0x58, 0x3, 0x8, 0x5, 0x1ff, 0x5, 0x4, 0x69, 0x1, 0x8027, 0x4, 0x3, 0xffff, 0x7fff, 0x5, 0x5, 0x0, 0x4, 0xfc44, 0xb91d, 0x8, 0x7f, 0x1, 0x6, 0x2, 0x0, 0xffff630e, 0x8, 0x5, 0x1ff, 0x6, 0x2, 0x9cda, 0xfffffe01, 0x5c, 0x0, 0x5, 0x3, 0xfffffffb, 0x0, 0x8000, 0x3, 0x7ff, 0x0, 0x5000, 0x8df, 0x7f, 0xfffffffa, 0x7, 0xfffffe01, 0x80000, 0x3, 0x8, 0x0, 0x5, 0x4, 0xfff, 0xe41, 0x9, 0x32c6, 0x5, 0x4, 0x10001, 0x4, 0x2, 0xffffff81, 0x4, 0x0, 0xfffffff7, 0x3, 0x5, 0xc8, 0x80000000, 0x4, 0x8, 0x2f9, 0x80000001, 0x0, 0x1000, 0x46e, 0x6, 0x9, 0x4, 0x10001, 0x8, 0x2, 0x6, 0x4, 0xeba, 0x1, 0x1, 0x8, 0xbc87, 0x1, 0x2, 0x400, 0x7fff, 0x9, 0x8000, 0x5, 0x2, 0x10001, 0x1, 0x3ff, 0x6, 0x22, 0x400, 0xfffffff7, 0x2, 0x101, 0x81, 0x80, 0x200, 0x3, 0x9c57, 0x9, 0x1, 0x6, 0x7f, 0x7, 0x4, 0x5, 0x6, 0x81, 0x8, 0x101, 0x400, 0x1, 0x0, 0x20, 0x80, 0x401, 0x1, 0x0, 0x7d7c, 0x0, 0x7, 0x1ff, 0xe5b1, 0x3, 0xff, 0xaad, 0xac, 0x0, 0x4, 0xca0d, 0x80, 0x6, 0x7fffffff, 0xeb, 0x2, 0x9, 0x3ff, 0xfffffffa, 0x7fff, 0x8, 0xfffffff9, 0x7fffffff, 0x8, 0x5, 0xac1, 0x0, 0x8, 0x0, 0x20, 0xb1, 0xfff, 0x40, 0x2, 0x1f, 0x2b7e, 0x6, 0x80000001, 0x1000, 0x6, 0x1, 0x800, 0x3, 0x3, 0x400, 0x3ff, 0x3, 0x401, 0x3f, 0x9, 0x7fffffff, 0x3, 0x6, 0xffffff80, 0xc0000, 0xfffffffa, 0x1, 0x8c, 0x81, 0x0, 0x2, 0x2, 0x873, 0xfffff83b, 0x4ec, 0xfffffffb, 0x0, 0x8, 0x81, 0x1, 0x1e0, 0x10001, 0x4, 0x3c3080, 0x80000000, 0x1f, 0x100, 0x7fff, 0x7b7, 0x80f0, 0x4, 0x2, 0x7fff, 0x8001, 0x9, 0x1f, 0xa3, 0x0, 0xe4, 0x800, 0x81, 0x0, 0x7ff, 0x8, 0xffffff01, 0x0, 0x10001, 0x1, 0x80000000, 0x7ff, 0x1f, 0x3, 0x2, 0x81, 0x2, 0x3f, 0x3, 0x8, 0x1ae6, 0x8, 0x49, 0x3f, 0xffffffff, 0x2, 0x5, 0x2, 0xfae, 0x3, 0x7, 0x9d6, 0x1, 0x6, 0x5, 0x1, 0x5, 0x28, 0x7, 0x1ff, 0x0, 0x9, 0x10, 0x6, 0xf2c, 0xffffff7f, 0x4, 0x0, 0x9, 0x3, 0xc0b3, 0x1, 0xfff, 0xd20f, 0xdb9, 0x800, 0x3ff, 0x2, 0x1, 0x343, 0x0, 0x2, 0x3, 0x3, 0x1, 0x100, 0x2, 0x1, 0xffffffff, 0x5, 0x4, 0x8000, 0x1, 0x7, 0x3, 0x4, 0x8001, 0x6, 0x4, 0x400, 0x60, 0x6499a726, 0x347b, 0x3, 0x400, 0x0, 0x6, 0x5e, 0x101, 0x5, 0x9, 0x7ff, 0x7, 0x7f, 0x4, 0x100, 0x3f, 0x9, 0x200, 0x7, 0x100, 0x7fff, 0x9, 0x3, 0x2, 0x8, 0x1, 0x4, 0x1, 0x7f, 0x2, 0x7, 0xfff, 0x7ff, 0xff, 0x6, 0x53, 0x10001, 0x3, 0xffff, 0x0, 0x0, 0x5c7, 0xe27, 0x7f, 0x5, 0xfff, 0x9, 0xfffffff8, 0x3, 0xfffffffb, 0x2, 0x5, 0x5, 0x7, 0x6, 0x6, 0x4000, 0x1f, 0x9, 0x8, 0x2c3f9d03, 0x80, 0x2, 0x454, 0x2, 0xf928, 0x0, 0x5, 0x9, 0x0, 0x8000, 0x7, 0x2, 0x5, 0x3, 0x5, 0x3, 0x7ff, 0x0, 0xca, 0x3, 0x2, 0xfffe, 0x7fe, 0x1, 0x10001, 0x20, 0x4, 0x1ff, 0x5, 0x40, 0x0, 0xffffffff, 0x2, 0x3, 0x1fb, 0x3, 0x3, 0x81, 0x401, 0x4, 0x100, 0x0, 0x3f, 0x1ff, 0xfff, 0x80000000, 0x400, 0xfffffff8, 0x100, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0x3, 0x3, 0x9, 0x1, 0x9, 0xff, 0x6, 0x4, 0x10, 0x7, 0x6, 0x7, 0x6, 0x4, 0x1f, 0x3, 0x6822, 0x7, 0x5, 0x3f, 0x200800, 0x53c, 0x81, 0x3ff, 0x0, 0x0, 0x101, 0x5, 0x0, 0x7, 0x0, 0x7f, 0x6, 0x7a2, 0xfffffffd, 0x1f, 0x10001, 0x1, 0x6, 0x1, 0x7, 0x5, 0x4, 0x5, 0x2, 0x20, 0xffffffff, 0x5, 0x8, 0xc383, 0x80000000, 0x9, 0x8, 0x101, 0xa07, 0x1, 0x1, 0x9, 0x6, 0x7f, 0x1f, 0x1ba7, 0x6, 0x0, 0xd99f, 0xff, 0xff, 0x1000003f, 0xfffffffc, 0x3, 0xffff, 0x2, 0x8, 0x1, 0x74cd431a, 0x0, 0xff, 0x6, 0x1, 0x3f, 0xfffffffc, 0x7ff, 0x6, 0x0, 0x9, 0xc00000, 0x3, 0x0, 0x3, 0xffff, 0x2, 0x6, 0x15d, 0x75, 0x8, 0x5e, 0x80000001, 0x6, 0x0, 0x80, 0x81, 0x7, 0x6, 0x5, 0x1, 0x2, 0x2, 0xfff, 0x7, 0x2fd5e1ae, 0x1, 0x3ff, 0x1, 0xfffffffe, 0x1000, 0xfffffbff, 0x5, 0x3, 0x1, 0x0, 0x8000, 0x4, 0x400000, 0x401, 0x8, 0x5, 0xffffff98, 0x6, 0x4, 0x1, 0x31da, 0x1, 0x8, 0x1, 0x1, 0x3, 0x7, 0x81, 0x8, 0x1, 0x0, 0x1, 0x7, 0x10000, 0xfec9, 0x3ff, 0x6, 0x8, 0x7, 0x0, 0x5, 0x3a, 0x6, 0x0, 0x20, 0x9, 0x5, 0x9, 0x7, 0x9, 0x0, 0x20000, 0x6, 0x94, 0x1, 0x3, 0x1, 0x4, 0x5, 0x0, 0x9c54, 0x0, 0x7f, 0x7, 0x5, 0x2, 0x6, 0x0, 0xbdff, 0x5, 0x6, 0x0, 0x1000, 0x3, 0x4, 0x3, 0x9bd, 0x200, 0x3, 0x4, 0x8, 0x4, 0x7fff, 0x8, 0x3f, 0x7, 0x81, 0x101, 0x3, 0x1, 0x2b3, 0xffffffff, 0x1, 0xea, 0x3, 0x0, 0x7, 0x9, 0x3, 0x3, 0x1, 0x9, 0x80, 0x0, 0x6b11, 0x2, 0xa9, 0xceee, 0x8000, 0x81, 0x5, 0x71d, 0x1f, 0x1f, 0x4, 0xa9, 0x0, 0xffffffff, 0x200, 0x0, 0x89, 0x1, 0x7, 0x8, 0x5, 0x8d, 0xffffff35, 0x0, 0x0, 0x5247, 0x3, 0x3d, 0x9, 0x0, 0x5, 0x4, 0x80000001, 0x0, 0xad9b, 0x401, 0x80, 0x617aac18, 0xe37, 0x4, 0x7, 0x10001, 0x7, 0x57, 0x5c8, 0x45d, 0x5, 0x5, 0x101, 0x80, 0xffffffe1, 0x2, 0x3e0eea4e, 0xfffffffb, 0x3, 0x5, 0x4, 0x5, 0x1, 0xffff, 0xfff, 0x0, 0x5, 0xd0d, 0x0, 0x3, 0x7, 0x8, 0xfffffff9, 0xffffffe1, 0xffff, 0xfffffff9, 0x4, 0x5, 0xd5, 0x5, 0x800, 0xcd, 0x8, 0x40, 0x6, 0x100, 0x1ff, 0x7, 0x20, 0xdbf, 0xd64, 0x20, 0x7, 0x4, 0x2, 0x1000, 0x5, 0x7, 0x5, 0x3, 0x1d, 0x3, 0x4, 0x1000, 0x5, 0x1, 0x7, 0x1f, 0x200, 0x7d39a083, 0x5, 0x7, 0x3, 0x8000, 0xff, 0x80, 0x4, 0x9, 0xf6da, 0x4, 0x9, 0x6, 0x200, 0x5, 0x34bd]}) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl(r4, 0x7f, &(0x7f0000000000)="0b60426c65b8fdf15217cc6aaa68fbb5e5a360a5663d51c5bc6acbde3815b2e4ae73e8ca71ffe341ef04408ee1e3484a962309de9735b6786960c9fdebbf22fe448864c02def0f380ffc3cf71fbfa62dbe9dcfe3f415875a83725a2950abfcf180ef5c46826aedc20596784157cdb996afd5a52bf9e4e753c2b6c06515a8085d8f358fead7d0d0078b9992b96aab757d148eeaa5fe0b6ac4108ac55e8cfad1118f27a999f5dbc1e01f6b0c4a97c523f94635cc393200f290b0c9a48fa96be0722b645b4c4dcbfb9510f6413309e4063f434aa5127ac29c4ea5bb1dcec19ac769aa51de343603103f") r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000001340)={0x8, 0x8, 0x8, 0x9, 0x2, [0x1000, 0x9, 0x6, 0xf61b], [0xec, 0xd65, 0x7, 0x69], [0x80000001, 0x10001, 0x5, 0x7], [0x0, 0x8, 0xfb, 0x1]}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x9, 0x200, 0x3cfa510a, 0xff, 0x0, 0x100, 0x3, 0x800}, &(0x7f0000000200)={0x0, 0x7ff, 0x3, 0x4, 0xb47f, 0x9, 0x624, 0x401}, &(0x7f0000000240)={0x4, 0x6, 0x80000000, 0x4ad, 0x0, 0x5, 0x6, 0x401}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x100000001]}, 0x8}) r6 = syz_open_procfs(r5, &(0x7f0000000180)='pagemap\x00') dup2(r1, r6) [ 505.743610][T13094] x_tables: duplicate underflow at hook 1 14:40:16 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0) 14:40:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}]}, 0x4c}}, 0x0) 14:40:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000400)={0x0, @empty, 0x0, 0x0, 'wrr\x00'}, 0x2c) 14:40:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:16 executing program 4: socket$inet6(0xa, 0x1, 0x6) 14:40:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x200, 0x22000) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000000080)=""/39) r5 = syz_open_procfs(r3, &(0x7f0000000000)='net/sco\x00') dup2(r0, r5) [ 506.407864][T13108] validate_nla: 2 callbacks suppressed [ 506.407897][T13108] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}]}, 0x4c}}, 0x0) 14:40:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='\r^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 506.577664][T13114] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 14:40:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) 14:40:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:40:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 14:40:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 14:40:17 executing program 5: add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="d0", 0x1, 0xffffffffffffffff) 14:40:17 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 14:40:17 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001400090400f3fffffffffffdff"], 0x14}}, 0x0) 14:40:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x101, 0x100000) [ 507.439364][T13134] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 507.555320][T13141] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 14:40:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x102, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:18 executing program 5: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 14:40:18 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200001e5c, 0x400000000000087f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 14:40:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) dup2(r2, r0) 14:40:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0xc0002) write$evdev(r0, 0x0, 0x0) [ 508.241668][T13158] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) [ 508.360656][T13169] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x390, 0x1a8, 0x0, 0xffffffff, 0x1a8, 0x0, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev, @loopback, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 14:40:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3f}]}) 14:40:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x201, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002000000ffff"], 0x14) 14:40:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$hiddev(r2, &(0x7f0000000000)=""/187, 0xbb) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x440400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x200}}}, 0x30) pread64(r5, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) getsockname(r4, &(0x7f0000000400)=@generic, &(0x7f0000000480)=0x80) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2283400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x104b230b}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "1cd8188fe2b0a20526f05dcaadc9b66674f7408492516a0c390d865d3703f5532b"}}]}]}, 0x16c}}, 0x40800) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffff8000, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r7) [ 508.880386][T13180] x_tables: duplicate underflow at hook 1 14:40:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010109}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) [ 509.067087][T13185] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) [ 509.200153][T13192] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0x238, 0x238, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}, {0xc84}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'tunl0\x00', 'macvtap0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast1, @multicast1, 0x0, 0x0, 'xfrm0\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 14:40:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001980)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000100)='\a', 0x1}, {0x0}, {&(0x7f0000001140)="d8", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:40:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) dup2(r0, r3) 14:40:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25e, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) [ 509.674750][T13202] x_tables: duplicate underflow at hook 2 14:40:19 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 14:40:20 executing program 4: r0 = socket(0x1, 0x801, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8851) [ 509.945243][T13210] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000001480)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 510.068487][T13216] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r4 = dup2(r0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r5) 14:40:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0xc0002) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x1}], 0x18) 14:40:20 executing program 2: process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/183, 0xaf}], 0x3, &(0x7f0000000c40)=[{&(0x7f0000000540)=""/168, 0xae}, {&(0x7f0000000600)=""/200, 0xc8}, {0x0, 0xfffffffffffffde8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10000000000002fb, 0x0) 14:40:20 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={0x0, 0x64}}, 0x0) 14:40:20 executing program 4: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xd1d0000, 0x4681) 14:40:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='sched\x00') dup2(r0, r5) 14:40:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001b40), 0x0, 0x12000, &(0x7f0000001bc0)={0x77359400}) 14:40:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x588, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x4b8, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}, @common=@hl={{0x28, 'hl\x00'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@multicast1, @port, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @common=@mh={{0x28, 'mh\x00'}, {"00ae"}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "b7b2"}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@multicast1, @gre_key, @gre_key}}}, {{@ipv6={@private0, @mcast2, [], [], 'nr0\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={[], [], @broadcast}, @ipv6=@ipv4={[], [], @multicast2}, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 14:40:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3a0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:21 executing program 4: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) 14:40:21 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private}, @sadb_x_sec_ctx={0x1}]}, 0x40}}, 0x0) [ 511.392365][T13248] x_tables: duplicate underflow at hook 1 14:40:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@txtime={{0x18}}], 0x18}, 0x0) [ 511.517856][T13250] validate_nla: 2 callbacks suppressed [ 511.517891][T13250] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) fcntl$setlease(r0, 0x400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r4 = dup2(0xffffffffffffffff, r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x7fffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000040)=0x5) 14:40:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 511.682299][T13257] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f00000024c0)={&(0x7f0000000ec0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "e07bcdf284bbf0490b5c7e5b737eeb33f12de97946566bf93b15a6a25eee7a31bba0603d5c732ddaac5a649edbfe6c673defd47e2f7f13e9a29c20414b6908"}, 0x80, 0x0}, 0x0) 14:40:22 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 14:40:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 14:40:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/hci\x00') dup2(r0, r4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 14:40:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) [ 512.320062][T13276] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x42ac01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RCLUNK(r2, 0x0, 0x0) [ 512.434866][T13281] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:22 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 14:40:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 14:40:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = signalfd(r1, &(0x7f0000000080)={[0x9d]}, 0x8) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f00000000c0)={0x2, 0xd, 0x24, "d848fb333a97865a90ce4f3808f1cd2ddbd0751922bba8c9041fcb9cb282875e54281f9705b232b6ff235b92452c240ddc7e2085dc5624ab71d69161", 0x30, "92b84d640b1ea299ee85f7b4d7828af48b7a304b9049534b6626b4feac5401052aa1b527cd061eead5db7e8c378214385f50a46b664bd2cb680f0577", 0xa8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x58044040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r7, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xce3, 0x1ff, 0x9, 0x20}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4044004) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000001c0)={{0x8, 0x5, 0x8, 0x1f, 'syz1\x00'}, 0x81, 0x2, 0x8, 0xffffffffffffffff, 0x6, 0x3, 'syz1\x00', &(0x7f0000000040)=['pagemap\x00', 'pagemap\x00', '\x00', 'pagemap\x00', '*$$]\x00', '\x00'], 0x1f, [], [0x5, 0x4, 0x6, 0x3]}) dup2(r0, r4) 14:40:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 14:40:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) getpeername$inet(r0, 0x0, &(0x7f0000000100)) [ 513.068116][T13299] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 513.202956][T13303] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:23 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 14:40:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x5, 0x192e, [0x20000180, 0x0, 0x0, 0x2000048c, 0x2000068a], 0x0, 0x0, 0x0}, 0x1a58) 14:40:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5450, 0x0) 14:40:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xc0000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x1da5, @empty, 0x7}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @loopback}], 0x3c) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x50000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) dup2(r3, r4) 14:40:23 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 14:40:24 executing program 0: 14:40:24 executing program 2: [ 514.015883][T13326] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 514.113922][T13332] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:24 executing program 4: 14:40:24 executing program 5: 14:40:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:24 executing program 0: 14:40:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1fc, 0x13, 0x2, 0x70bd2a, 0xcba6, {0xa, 0x4, 0xff, 0x6, {0x4e21, 0x4e24, [0x1, 0x20, 0x20, 0x9], [0x7, 0x8001, 0x4, 0x1], 0x0, [0x3ff, 0x7]}, 0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "5a30261745ad94c2982e9b01472d71963c1a72a4172bc2d154d1f6c5acae815af0509cbf9a2b9a5f5c201a7bfa1960422bbeaa282c2654edea30ce6e2b4ec7646a1ac6f0f0b4dcabd37bc5a8b767ddd0124683ab52b53a2ee0a8eef9c17739feeab7d28e2931599082889bfb3b4a6167de45891fc90f4ac25d5fe7ec6345fa5f0dc8"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "45794212d622ebc9408e83fe397484759835a027c41fade5394163ad25c184aefa0d50d4f8e324762580e6eaf25307fb2093e461938cf0acb35ce61be21279a42ac87ac79ae5df1ef365f76860ff6e8712a7059e5343248e013cec47831ca13327e0218cd6da13f9f2ef5c6a72ab54c85508401a0239114d2f6810d16e2fc0013728f6f64e059a299eb28bd0664682cba43187d2337c7ffcb2db54f37a001cbe37e7d4b0160048c2055482bb8d0211677b1ecc352411e4a3b3c04512d1472ad7004480186f3f"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "e6c017934379e183cdc01312040d8495452e7689e1f385ce9579d5e32519a6447678d03d87a1b958ad87c1fb3400cfee36177a59779a023b1b85a421120639b0af8fdd403e41433860b8c0510696e4be34d66ab3f8647d"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x923, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x68}}, 0x20000811) dup2(r0, r3) 14:40:24 executing program 2: [ 514.758202][T13346] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 514.914485][T13351] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:25 executing program 4: 14:40:25 executing program 5: 14:40:25 executing program 0: 14:40:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') r4 = syz_io_uring_complete(0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0900001d1080000140000018000000000200000010010000"]) pread64(r3, &(0x7f00000001c0)=""/102400, 0x19000, 0x103f00) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000019200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000191c0)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="295ffc9026e6"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d4cd037faf18"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="905fc68507f7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x408c0) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r5) 14:40:25 executing program 2: 14:40:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x90e, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:25 executing program 4: 14:40:25 executing program 5: 14:40:25 executing program 0: 14:40:26 executing program 2: 14:40:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:40:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x90f, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:26 executing program 5: 14:40:26 executing program 0: 14:40:26 executing program 4: [ 517.190611][T13382] validate_nla: 2 callbacks suppressed [ 517.190647][T13382] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:27 executing program 4: [ 517.343644][T13385] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x60, 0x1404, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10040011}, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x9}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="07000050da11d60000a702000020000000"], 0x12) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f0000001340)='/dev/vbi#\x00', 0x3, 0x2) ptrace$cont(0x9, r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) clone3(&(0x7f0000001280)={0x1001ca000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x2e}, &(0x7f00000001c0)=""/58, 0x3a, &(0x7f0000000280)=""/4096, &(0x7f0000000200)=[r4, r4, r5, r4, 0x0, r5], 0x6}, 0x58) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000014c0)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000100)='net/llc/socket\x00') dup2(r0, r7) 14:40:27 executing program 5: 14:40:27 executing program 2: 14:40:27 executing program 0: 14:40:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:28 executing program 0: 14:40:28 executing program 4: 14:40:28 executing program 5: 14:40:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') dup2(r0, r4) 14:40:28 executing program 2: [ 518.116502][T13396] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 518.190515][T13400] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:28 executing program 4: 14:40:28 executing program 0: 14:40:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:28 executing program 5: 14:40:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') dup2(r0, r3) 14:40:28 executing program 2: 14:40:29 executing program 4: [ 518.838484][T13413] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:29 executing program 0: [ 518.974353][T13417] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:29 executing program 5: 14:40:29 executing program 2: 14:40:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1a1801) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x199000, 0x0) dup2(r0, r3) 14:40:29 executing program 4: 14:40:29 executing program 0: [ 519.631052][T13429] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 519.769938][T13437] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:30 executing program 5: 14:40:30 executing program 2: 14:40:30 executing program 4: 14:40:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) dup2(r0, r3) 14:40:30 executing program 0: 14:40:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:30 executing program 2: 14:40:30 executing program 5: [ 520.581196][T13451] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000000)="e9db68f031259e465ad6986019eca7867d68a30fa69784db3e8606cf1e0910d3ab150f97d7fe12", 0x27}], 0x2}, 0x50) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)='pagemap\x00', 0x8, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) r5 = dup2(r4, r2) write$P9_ROPEN(r5, &(0x7f00000011c0)={0x18, 0x71, 0x2, {{0x40, 0x4, 0x7}, 0x81}}, 0x18) 14:40:30 executing program 0: 14:40:30 executing program 4: [ 520.672155][T13454] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:30 executing program 2: 14:40:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:31 executing program 5: 14:40:31 executing program 0: 14:40:31 executing program 4: 14:40:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x3ff800000000000, 0x8480) getpeername$qrtr(r4, &(0x7f0000000100), &(0x7f0000000140)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r2, &(0x7f0000000380)=@known='system.posix_acl_access\x00', &(0x7f00000003c0)='0000:00:10.0\x00', 0xd, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="46270835b2945663d86a850288ae83b1bff7b081e9f6fc2b7b3b431c8e6967606a3814ece7600100dd0ec653a5557072b72afb21291e9396598565e7f9c151803228a16379311a3ab822db05749f345bb591b6f059cd68ef638169694802b790d96f0a368657af9aa654cb17a23b11f37f88fd4e30b3270e2ec1f458719730ce3136"], 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x80) dup(r5) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r8) 14:40:31 executing program 2: 14:40:31 executing program 5: 14:40:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe09, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:31 executing program 0: 14:40:32 executing program 2: 14:40:32 executing program 4: 14:40:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="2c72acfea30acf2e6e4cc4bd546f6f746d6f64653d30303030303030303030303030303bf3f01992304ab0302c75643d16daacda2c0c62f6512a58bac30399f22000000000000000d573b41bb8f18c1f2e06d5e87e2f0fdb4eea8f04f14088d64ba2f14e2b191f517e7c10e49e0000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='s']) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup3(r5, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) epoll_create1(0x80000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r8) 14:40:32 executing program 5: 14:40:32 executing program 0: [ 522.287846][T13490] fuse: Unknown parameter '' 14:40:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 522.395543][T13490] fuse: Unknown parameter '' 14:40:32 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x450}, 0x0) 14:40:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:40:32 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r0, r1) syz_open_pts(0xffffffffffffffff, 0x0) 14:40:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) [ 522.821222][T13501] validate_nla: 4 callbacks suppressed [ 522.821257][T13501] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) [ 522.930484][T13505] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf09, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='-\x00', 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000000)=0xb0000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r3, r6) 14:40:33 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) [ 523.394733][ T8729] Bluetooth: hci2: command 0x0406 tx timeout 14:40:33 executing program 0: 14:40:33 executing program 4: 14:40:33 executing program 2: [ 523.654760][T13521] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 523.809084][T13530] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:34 executing program 0: 14:40:34 executing program 5: 14:40:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2d, 0x0, 0x6, 0x101, 0x924d90eb067e9a28, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x8000, 0x80, 0xc66}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="afaa6667603c3610d07961b2562e7bd0c998ce737543b36c3b83479b5aed07c2cf66589ec6bd9b15d28e6de176789ee03a8d322686bae8db07d563b1aafa7727bc", 0x41}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}], 0x108}, 0x4011) pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) fcntl$notify(r2, 0x402, 0x80000002) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r11) 14:40:34 executing program 4: 14:40:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1100, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:34 executing program 2: 14:40:34 executing program 0: 14:40:34 executing program 5: [ 524.531039][T13542] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:34 executing program 4: [ 524.656377][T13548] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xaf6313175f1b3fe) dup2(r0, r3) 14:40:35 executing program 0: 14:40:35 executing program 2: 14:40:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x0, 0x0, 0xb595, 0x0, 0x1}, 0x40) 14:40:35 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') 14:40:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) [ 525.328238][T13562] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 525.447784][T13568] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r2, 0x46, 0x2) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000080)={0x0, "c0a5c66d05f3d8c257d5f08b961d6a73"}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) 14:40:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x49, 0x1fd, 0x2, 0x8, 0x1}, 0x40) 14:40:35 executing program 5: socketpair(0xb, 0x0, 0x0, &(0x7f0000000200)) 14:40:35 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x161181, 0x0) 14:40:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0x1}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000002000000140000001400000002000000000000000100000804001b000000000000dc8e00000027337650f7b32201abbce59b73c8a1b14d132d5a0a"], 0x0, 0x2e}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)=0x3f) 14:40:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70200000d440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ff0808ffbe640200000000005502faff037202000404000001007d60b7030000001000006a0a00fe10000000850000002b000000cf000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c45841e41f44ae7c5e84e6e3a94b574d2eb38a748355f0b886bd005362df1d4fdd860db580892243533e0f242a46b3009a54f4077db0d4968a384b0f59c7919b89bd9d5fdb68832e986440ff0a7edfa0cb231ccd00000000000000000000007777e2704653f620f5898a327a5ce13419b2272c3c7fea60493073807c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cf96a02fa0892728807982d90e116bba29bb744af81a4cd8f3ad2d9582da7a9ba2ebdd0b424ac416e66af9ebcfea905d37cf226312cb81ec8439ced91f5c93f7f4d256c1d06301460142f83b422dbe57dfdb06dcf91fd2464cb130033d649d2110cf2e1f4682c24a305447c5e0807af806f952e8df0b1766ec7ecbd061772daa52a38539295d3fea7a7e66944121ff041143edfa9f1bf98d0a38edc345415c42d3d2dd31d9d32a4796cd7ce18b68bc37e061d33357d6a39d33c702576cc2a8881015c9e1842fbdf1bb75c663e3d76c7a37c5cea2e12102f237bbf60c0a3bf07d55b3888418de2b2ad23000000004ccddf247dd2c712e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02f0a1c9dd5d9faa8c418f6a63fec7690a9b01737c8caaf78ba58fe6a4d8307178d7a30881f603791198e1b3f7f33ffba4b08bffe2de7fb1793a28434db0699366b5cd0d372e60a8a59c4ac48f8c96b804fead2e0b9725fbe0d58ca54833eaf9718724b448e42c652fb73950757d845e13cafae42dfbad826263d97185f0fb996a281c2b3481a5f0bba29d12471ca4fe202f9a17b2837a23eb0454d9c35b2995e63c14590696a28685da05d718c6a827513a2176d8a3dbbeaf3460b12110"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 526.079652][T13585] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x1}, 0x40) [ 526.186894][T13589] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f00000000c0)=""/244, 0x26, 0xf4, 0x1}, 0x20) 14:40:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000000)="dbfec8b335659ca7378e88b767d446e8ddb88913984d22aca63533cd591a1c054d45bdce707ca7aeb5c1477a0f4fd816d55fdff7055e563a797d7a354b522bb7df39e597197a29890c4847d9924ecbcab7cbd0d869fa77dee87d34ec56728d2ea2def3626d165df8d5e640bfab69c26c01ed3d38d30a41702912f3daa5d07e6da9fcf68f5b9e8ead3bd3f05abf4345d3c6318bf6af7647", 0x97) dup2(r0, r3) 14:40:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x100007}, 0x41002, 0x7c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x10, 0x1f, 0x0, 0x0, 0x0, 0x1ff, 0x84450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000500)=@xdp={0x2c, 0xe, 0x0, 0x17}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)="7696f06172d3fe50dcbaac4a16fb28b44e0c3de7fccb60a1301e6b14603659fc247cb8a57b932d00b5151e7176821177ae6bbddb23610b2c51532426628e0902bc063e5e9e0a39823537325705c8300043c9ac6b1461c9975fdac6d9dd56b9fd5ce3f882bf2496520b569035026d51a650aa6c050f20fb649b50b3ccd604e7e37517c3389cbef8bfd25f16fb4f4bc85eecf2dc3a19", 0x95}, {&(0x7f0000001700)}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0001000000000000ed010000ff7f00009c6eb91f3b0101000000000000a69fbe037944e4c08ddc06a8410f2d2ace2a600ea2423e2fd63880d470ce7f180c0cd4be227686deb7a82e0102353cfa0300000000000000008ac4c9e2f394cd37fbb25fd8b3bb891a2a141a8476285ef32bae014a8d3b1af1bb6b6d25f82038da1ebe773722ca59bad4fec428ea09842e44280330a6198c80ee586740ab32bf50e9163e213e2cb438ae076a9ba8bbbeabded8a34c291e82660c84b33a12dfd1624579f976049c3902e99cbfe49364438461abba5d2b84e10ec4b65ee7769238d9c81cd2e9c27c8b9ed715d7d591234880000000660000d0000000000000000d01000001000000d4e3f712305484b6db5ff8ca35c1b1bfa45d9039fcdba35a29a33e9f4bd2c7b543b7e62c7f0d3f9538e0ce9c684f38bb932b4ab82a0a4c3b7b7ef251c29cab45fa3415971edfaa50b5503e63d9865376c924d953d7c25633cdd2d31099dcfbada863134362cbcd9bd4c30c15e600d08902f70d83ed7945a04f8ce762450462dac47d192aa5728dfa467802c93096e5c0a5ff528d79632df8783734296a87d62315a794f4da077cb6a4955397d121254f8f0ddf629ed4d621b0c1293f2385516a297fa31c83d81d2682b67a2c8078ed234d701ae1307d61e4c44fd921747ab3730f0000000062cb1f0e0063000017460000004cdd73f451606b82aa6da5b0a35251fbc61810080df3bf5b5a7b9ac470a0d1e51d616a8732f4793326a20e90a3199078d31bde0f6f898c11807e17128eae2d53d5c7fbd7541e5a6397ad1fccea0e09000000000000001b13e0dadae0046015cf351387e911f2284933fb910ec05c8bba170757a20432faf6d39156b0c9bd22d5ad315e9dab538ce05995e9faf94dabf2961d85df4f9b346f04ede5dca4c91ba87357fc5b50a027bf5f00000000000000000000760166a4089c4d75610716ecb786bc18fde42cedbe7ccc4b6f4f141e14839448cb28d53258de9faa307e59f32264404dae4ec71c8ca12bb94eb0ee89fc0b1268af131a2c050d6bace8b693d51778568b7a45e1b35a16"], 0x298}, 0x8000) socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000380)="c70e1249e1e8a92daf5fc5873622e258198c4f332cdd80c0bad0975f4f626a169fe67469938954ba150936ce9cdf4360a80d308f0afae649dea93e0ea56dbb3882bbbc5d86caa53cab0480dc85c6541beb6f15b2044e2154f7260c52de0f0b610e557aa5907181cc183531bc7dad23bc49c76e60952a99c6f0eec1285b272da376b6f9b82c6d35ed756ad99327a36eb9a7cec5f7f5748ac663ad2c1ade9aea0116bb9e35c072fd759b5395ed32e8e4dbbeb9e8df180555d2ba52c3232c5c1dd5354bc3385458c9640b2f708b36bc26d2a4e700cb097a94fe72515c1c3c1c79b01dcd59fcecd1d9d2b084f1add8bf7f73ffceb6989c23", &(0x7f0000000640)=""/147, &(0x7f0000000700)="7822ec89b6d77b916c57aa003818e26f99573f2387c58ca8939b3a3c2dac1e255a75181033a0bfc47b0bcc1bd3481f41b05c25a5674864982b1ed152c844a434ccb3792993e5ba2a8595419e00227b5dbb15645bee1df48c3a71a4ef8c3cdbfcac2de308909def2f187a50d53b48c9ce02d3d6b8633adada3ae6af581eda2854ea86bdc1ea50e08dbbe914e0cd43c40da7e46d7bf16dc77a8482eaff11821dddcfff696d8b2ef578dae0999e316543c6b0fdce73a7228b236c6ccb4d88d51f944ab20bf5da2af2a9944bf97f06b81c66c7c14404d9268b478c2e1791c8f59c5a32d342e4209ee25fe856cd5ab7c1ca18bbeba3d9c7185a35d77146a7f82a6660951ab9886032b30ef726920ba20c9d8c5482cee12e416779e082887b7300d7eca2af3fa51689c5ce4562255f4634079efba13cacdaced42e6200aff63b459e18c72ee6dc6fa1a78301216833e23d788f45223a0893b7ddaeeb3bd83e650f35c43fa3be910b4ee37cc25d54fd08188b0f298aaea4c261344e7e7be5677421bd32628b2891ce6d70a8771a2910012b0ab75ee46d06a0938eee3228a44d6289002294718aa927f6eea4004bd706ea8197d0e11e21be65b13a4856eaebfaac87dfe856227e9a8cdd5448a1199088964f437f29744cd2e5c8ec1a05bc789cf6bdb2d49335f7317a44001e6e2f9cd03897bb9450a75e0847cecbfd3e8341cf717360ffd82de919741bad4868c0552166b11246799b708b43b3f6d63a53446741eecfd6e0ad4c32ed5db1f2af9da85b1f5a00a2f51c443e1868e5e20a61dbd67d138e048bcc7a0f5d5ec08206228022f50afc37b5ead2d76e1172e49d56d2fe9fda5ff0b131abf1df0f484a05963c1157477ece1c7fc7465797f67617fd9a81aa273ee685419ae2448126af5a4b97b9af94636d8f87318fda32059cc7486cf254a65fd76bd80d00eb5abd148473c7a570dde6bb37f9cd78c71c832815a53a6342c67d44fdc526b15b54e053c2a6bf26437555e1bc2cdae2d466b88e2e5072ae62bea32e06e7353623c656a7031a9c46dfbbcb5ab900b1e99e42be84a0592ead5356748a93ba14e9363c47a5ddd7227334b53911fca6a0903b003f19b5340ddef786455cf884914ab6355c8b2233d24b205e55969724b1265878a43e20c72e7151bcb43376370165ddfac7ce39d8bc9397482c49f02ea64227b89497f34cca784d5c6a92526e73320921206a0b2f62750a3d66b4737f13d932468829cc8e12af112e34207e5c24ddd01d663cd93c5de1b5b2c63988c1ee75b019b088b00941d2fe4ead2a9c7663a03081b606be307c4e2fcd35a4faa6e0a1b8c909a94f5cb22db4a6a2255ff68ad9c6ab9846866aa2437cced5a7ceab69e81290a35fcfa70d344801a8b76de4bea84f450f2fa9576173d96d76021273edd6c9b1b589d0a867fecfe0dd5fcc43aad9e08ce6bfcf785f192feb2756a9b478799a71859d8fc9d2cffa149e90337b402c6e8f48e03345bca32d3b056fd144577613a25062479bd0c808d332e8cc8f562c6a5997136dbc9867080c5104dad4404833a8f806527aa82e06f7470476d9481a5ed401fc57496e302a5fa2e32dc3fab6e500f85abe4f97a363d9134661c0b10037e43838c675ea320912d1293dc29b3d46b6ff719eb412dbf444b6510603d14cd3709bb6ab302c37dcfb8662156e4dd1b2a366535d912e1b288ebee6d6a698c0b001130f3f8b6d09753274bfa5263de271bd22b04321eb4c6bbab45ae8688eae6a3940fdab6660bdc9ab6f383f9e7498db54e2d678154ab6193945e2db1f74d93087c639fd974ed8dcb69c14589abc72f563b5fc640adba1dfad2f251bd066d4cd7bc547444eef154450f55bbd0d5d1593261e7631a5f31f62d1690c56077b7b3d6a4a537ce3e1b084d32dece97d78f46e29de376c9c6aebbe7c97e4beeebd76857a4ed5dd74eedce3400844ab176a831b9deeb631642765b66fbc9b68bf0eb1ec428b1a8e919ab701b970ab6b13e60a78db2259fff5e63beebd4547613e2879370e8539495b48aa23208da780ad45f80468088e0375a87993478dd9d189a057f3d20d7182bf0638588f433166e980cb06392adf9d523a7f37a953f31bc9040d00d7fafbeda102a1fe31f43c1cd7dd3ec71ac1f007ec395f0c76d60bafa23fa419915ba006f46479834fde3f88bbc12ca23a311595afc5027e7fdcfb0ae373831d8ea93c66064e5770b554fdd185b8796470db94ef52833817ed08633f7bb6ad5ba255c7ce9319cd8cd8d47b8043dd442cf2f41afce3e2b1906132f9309356588154e8adb0ccb599d6e5d24099376858e80a18dd9faf43e8f181d03cbfec44d913637e22fced0855a1bcdf8ee0c03621543ca4d2b55f5aa28a34a13c3ac13f51640fef9016985cef473fc21f1ca2875c223014d8b4f1894fa26b250481c8c8a3cd066460d872a6d2d9352bbb9ccb408657eb2dcbc119636a126cd6a4f117e9b7af3f72f1558784449109d390b6b7074bc4ff4999af007df6e5b583fa3fee23b1ae62d16d203423165a92d9ec7afc74f1477fe4b83134108d084135b4e5217b722eb54971a103b93a35f33e812248c6e4413f3eed5d5253b91124103d655f3423b2a46e86fb50104ce386264702b41391023d78cedd18493307d1bbaf9bf41c0eccf32cf1b24abcbf672c758b94ed064cbb37514db88b6e9546050aee10000b35d4ad525d2c8ec58839e7dc8d491d01d7ff32dab0c7f00c6a260ac935965b3b738c9e9020b6970fde76b8208bbab3b6ad7a42475b2c81831b6bdf24810eda180dd67006f24ca2ce6c8fabafd01bec4ce341bcbc95c400d85d4296d1947aaa7d2cc9e306bb5d5cd16523821741b7d8226292d19872e63cc27201d65035cfde303f59493892f4f8aaa017735c03a885e62819b7f1d5e2c8adb75ee86baa751b5467c355f16777386d691c4c739b9d65ec82ab5895e6c3dc82f1e389e75a4b2755c6bc3c3a2b8e5ff352eb06612d14439dfb3d7494757334b01cc2ba92d5ea41582d225ddd7fc34192cd82e610446b5c21bf48fd08c2a1774d3b3e4428806e077023da6474b75307e2de4b9b03db73c97970a6af4242afafc7dc76414a1c08ffca5c7955faa943e1bd9943fa85497974a0686680b98c049848a03fa9b2511f110c380263f0f727e21b5a003e1fbeb976330018ef4da5a1908bbfee5fe76fbc5fc56047bfdeb883cd5579192124b155b0ccd1686eb5bb1bb7ff5c9ac5bf5202f62986728161af0a432b0ab2c4f66dd7573a526f6e21ed847e474d0b3d77decc7029b42e7e17ca48899b87ec8aa30876b6a1ac52f021b280dba27fd5f2f065b3871d9bc11e4aeb6e472014fab61a9d1152721ac605d5ea2c0b56d9076e00a11b38f44c5e0fe1b4aa974b0bae9ba70cd25e32a0ad07150fb4d3ce9b0fb89af665e6ce4f75926eaac65bb1832e7cc54ac835ecb2631951d109a7c1f4035cd8683aa8ec2c1414363d93bffcaa639d884cd01c90cd99f224d7c28c15c56afeaa203e96826d5b92726bd7c158b0cdb434463e255dc87053b0a883957861600a2c30bfc4ab07ae6b4c7a346719c4a7cbed318cbe36c492216fa6a890377c83e357ba0d90245870f88f6b522a957514bb507906b9a4a4c9badd8e308e5e97e9d7460447ef6411c375606e8f53ebd6f8bb0d92ca19536a70eb14dcca20e6de1dbe1f1eb2f3e26b8f59ac7e0e5240c602ed33a83dd6e9b06d5a90312731ba22eb4bebe97b4191cc63ff98cae2d6ac6e4c6472a82702610e0350e4c47d574ea9f31a461d2727c6f6f59e6e8d47213deae88254385c51697aa80b793287484c950d15d611711efba8ee9e45e031fdf9acfa6589ecacd7a32aa1a98aa97243dcbe65f572738d2949b32a7772e718555a98ab7b43157d6055cb6a645514e325fc96f5f535a34daf49382ce40a04af6674c3fc63e5a0f9393452b7f0adfc29fb438f05f1e8f530571ab01a8ccbb38766297b77092dd02eaef98ad9298594049bcbd41ec60c6f8a12f1a607b9b205714be85fd50996ff7b7af07c01101a02ff1a13d936e02acaf18f799a2a4ea497a9209a00ff416f74ce7fc54bda4514c8350daeda8bc140369f675d5c31cf099b74533c6de7e1b8c240b694", 0x0, 0x9, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, 0x0) close(r4) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0c0583b, &(0x7f0000000000)) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000ac0)={0xffffffffffffffff, r3}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1b23c5", @ANYRES32], 0xfffffffffffffffd, 0x4, 0x4d, &(0x7f0000000180)=""/77, 0x40f00, 0x9, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x10}, 0x78) bpf$ITER_CREATE(0x21, 0x0, 0x0) 14:40:37 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TUNGETDEVNETNS(r0, 0xc0189436, 0x0) 14:40:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x49, 0x1fd, 0x2, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001780)={r0, 0x0, 0x0}, 0x20) [ 528.064206][T13627] validate_nla: 2 callbacks suppressed [ 528.064241][T13627] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) 14:40:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r4) r5 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 14:40:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x51}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={r6, 0x86, 0x3, [0x101, 0x9, 0x5]}, &(0x7f0000000040)=0xe) r7 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r8) [ 528.479810][T13627] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x100007}, 0x41002, 0x7c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x10, 0x1f, 0x0, 0x0, 0x0, 0x1ff, 0x84450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000500)=@xdp={0x2c, 0xe, 0x0, 0x17}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)="7696f06172d3fe50dcbaac4a16fb28b44e0c3de7fccb60a1301e6b14603659fc247cb8a57b932d00b5151e7176821177ae6bbddb23610b2c51532426628e0902bc063e5e9e0a39823537325705c8300043c9ac6b1461c9975fdac6d9dd56b9fd5ce3f882bf2496520b569035026d51a650aa6c050f20fb649b50b3ccd604e7e37517c3389cbef8bfd25f16fb4f4bc85eecf2dc3a19", 0x95}, {&(0x7f0000001700)}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0001000000000000ed010000ff7f00009c6eb91f3b0101000000000000a69fbe037944e4c08ddc06a8410f2d2ace2a600ea2423e2fd63880d470ce7f180c0cd4be227686deb7a82e0102353cfa0300000000000000008ac4c9e2f394cd37fbb25fd8b3bb891a2a141a8476285ef32bae014a8d3b1af1bb6b6d25f82038da1ebe773722ca59bad4fec428ea09842e44280330a6198c80ee586740ab32bf50e9163e213e2cb438ae076a9ba8bbbeabded8a34c291e82660c84b33a12dfd1624579f976049c3902e99cbfe49364438461abba5d2b84e10ec4b65ee7769238d9c81cd2e9c27c8b9ed715d7d591234880000000660000d0000000000000000d01000001000000d4e3f712305484b6db5ff8ca35c1b1bfa45d9039fcdba35a29a33e9f4bd2c7b543b7e62c7f0d3f9538e0ce9c684f38bb932b4ab82a0a4c3b7b7ef251c29cab45fa3415971edfaa50b5503e63d9865376c924d953d7c25633cdd2d31099dcfbada863134362cbcd9bd4c30c15e600d08902f70d83ed7945a04f8ce762450462dac47d192aa5728dfa467802c93096e5c0a5ff528d79632df8783734296a87d62315a794f4da077cb6a4955397d121254f8f0ddf629ed4d621b0c1293f2385516a297fa31c83d81d2682b67a2c8078ed234d701ae1307d61e4c44fd921747ab3730f0000000062cb1f0e0063000017460000004cdd73f451606b82aa6da5b0a35251fbc61810080df3bf5b5a7b9ac470a0d1e51d616a8732f4793326a20e90a3199078d31bde0f6f898c11807e17128eae2d53d5c7fbd7541e5a6397ad1fccea0e09000000000000001b13e0dadae0046015cf351387e911f2284933fb910ec05c8bba170757a20432faf6d39156b0c9bd22d5ad315e9dab538ce05995e9faf94dabf2961d85df4f9b346f04ede5dca4c91ba87357fc5b50a027bf5f00000000000000000000760166a4089c4d75610716ecb786bc18fde42cedbe7ccc4b6f4f141e14839448cb28d53258de9faa307e59f32264404dae4ec71c8ca12bb94eb0ee89fc0b1268af131a2c050d6bace8b693d51778568b7a45e1b35a16"], 0x298}, 0x8000) socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000380)="c70e1249e1e8a92daf5fc5873622e258198c4f332cdd80c0bad0975f4f626a169fe67469938954ba150936ce9cdf4360a80d308f0afae649dea93e0ea56dbb3882bbbc5d86caa53cab0480dc85c6541beb6f15b2044e2154f7260c52de0f0b610e557aa5907181cc183531bc7dad23bc49c76e60952a99c6f0eec1285b272da376b6f9b82c6d35ed756ad99327a36eb9a7cec5f7f5748ac663ad2c1ade9aea0116bb9e35c072fd759b5395ed32e8e4dbbeb9e8df180555d2ba52c3232c5c1dd5354bc3385458c9640b2f708b36bc26d2a4e700cb097a94fe72515c1c3c1c79b01dcd59fcecd1d9d2b084f1add8bf7f73ffceb6989c23", &(0x7f0000000640)=""/147, &(0x7f0000000700)="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", 0x0, 0x9, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, 0x0) close(r4) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b40)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 14:40:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x150}}, 0x0) 14:40:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x90000, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) r6 = fcntl$getown(r1, 0x9) r7 = syz_open_procfs(r6, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') dup2(r0, r7) [ 529.248702][T13658] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 529.300802][T13666] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) close(r2) 14:40:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote}, 0x1c) 14:40:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3a00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:40 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000940)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a66a2f", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 14:40:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001f8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r2) 14:40:40 executing program 0: [ 530.049708][T13676] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 530.152172][T13683] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:40 executing program 4: 14:40:40 executing program 5: 14:40:40 executing program 2: 14:40:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:40 executing program 0: 14:40:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x26c, 0x13, 0x904, 0x70bd2b, 0x25dfdbfe, {0x2, 0x52, 0x0, 0xc2, {0x4e24, 0x4e22, [0x10000, 0x1883, 0x9, 0xba], [0x2, 0x7f, 0x0, 0x5], r4, [0x9]}, 0x52, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "61acdddbd6a436abf3828cb03f3a454929d739926e5b16ba940410a8c3d5fcf451fb008f91804eeccec65efae5040561e8761f756b486545565225340b7905a9574dcaceb60c7a88ce3642455a10c7a6624c3c1eba27599ed5c88eab6ab46bc775f0e98b0bc5d498fea4afe584933787fb14537e08784bc985f96ee84b8f50edf0d9e46f060a2609"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "2f52966b149eea9de5881d3540b689469e5671288f658f98b9f5e571ab56761a392379e56bb2badb5123dff8eb16598f11bc997735d22639fd852ffda01fdfe9cfff8c8c1d0b0affe8769c3ec79a1e2ddf06b06492e286350f4277ff5a5c747202db4f933d7c3a90b3da6f819209d5cd3ef936edee6abb43ba996c617ce868462b95223188dc05a1e8e4de392f171bba88e1c80aaab11fb88c1183fbd7d14981773c8b9eea629f12d3cfabc20aa1a1c4439210dcda614c196d57c6ad60a71a94acbca8b094fcdb58f210f64fb16d365893f1820827a55f80ea0a2853cfe02c9898f5e09e685d34"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "30f36a2e11c3435211429011d01a658b8fa0b737cbdbe92cc38f8fe4459f3ac8914b319e443c3f603ac6e338a424430fa74384e49e267bf49fe9695bc7d1e6e3b24bf580991eeb6aa989bad105aa6f59a3b9425b0b65aa0eacc4f14c5c6ce88041669a0625ee5ebffc5852f28f0e60d07f572204a59ba969f4837c9c337aa380a836552956d2ce538ed9c0849ecf4624fd9b6b954747ca6db8ca07c2a1ddf89f4e481bfe"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat2(r10, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x220000, 0x80, 0xa}, 0x18) getsockopt$inet6_dccp_int(r11, 0x21, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r12) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/105, 0x69) 14:40:40 executing program 4: 14:40:40 executing program 2: 14:40:41 executing program 5: [ 530.853483][T13697] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 530.919763][T13702] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 531.008523][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:41 executing program 0: [ 531.170150][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 531.220264][T13712] PF_BRIDGE: br_mdb_parse() with invalid ifindex 14:40:41 executing program 2: 14:40:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:41 executing program 4: 14:40:41 executing program 5: 14:40:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x29, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) dup2(r0, r3) 14:40:41 executing program 0: [ 531.723545][T13717] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:42 executing program 4: [ 531.841211][T13722] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:42 executing program 2: 14:40:42 executing program 5: 14:40:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4788, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf272}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbaed}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff800}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x91}, 0x0) dup2(r0, r4) accept$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) 14:40:42 executing program 0: 14:40:42 executing program 4: 14:40:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2}, @void, @val={0xc}}}}, 0x28}}, 0x0) 14:40:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:40:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:40:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}, 0x7}, 0x0) 14:40:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 14:40:43 executing program 2: socketpair(0x18, 0x0, 0x3, &(0x7f0000001040)) 14:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x0, 0x28}}}}}, 0x28}}, 0x0) [ 533.338288][T13757] validate_nla: 2 callbacks suppressed [ 533.338327][T13757] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 533.466426][T13762] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:43 executing program 0: 14:40:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x22, 0x8, 0x80000000, 0x6, 0x3d, 0xf24, 0x5, 0x2, 0x4d8e, 0x9, 0xfffffffffffffffd, 0x6, 0x3ff, 0x9}}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:40:43 executing program 4: 14:40:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4888, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:44 executing program 5: 14:40:44 executing program 2: 14:40:44 executing program 0: 14:40:44 executing program 4: 14:40:44 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r1, r4) [ 534.267344][T13781] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 534.414880][T13787] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:44 executing program 2: 14:40:44 executing program 5: 14:40:44 executing program 0: 14:40:44 executing program 4: 14:40:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4c00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0xa4, 0x4, 0xfffffffa, 0x10, @dev={0xfe, 0x80, [], 0x12}, @empty, 0x7, 0x8, 0x9, 0x80000001}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r9, 0x0, r10) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x50}}, 0x0) dup2(r0, r3) 14:40:45 executing program 5: 14:40:45 executing program 2: [ 535.047572][T13797] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 535.147274][T13803] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 535.175731][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:45 executing program 4: 14:40:45 executing program 0: 14:40:45 executing program 5: 14:40:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4e00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:45 executing program 2: 14:40:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0xfffffffffffffcae]}, 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc13e126895cbd4a1193ff4b83e422b258fe4871ec6e2a16a8e9fab6d234816b7dedbdfadc70fe0f19f66ccc98232ad0", @ANYRES16=r3, @ANYBLOB="220026bd3eacfab95a7e1057fc55"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44824) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x448}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x400, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc80b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf47}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffb43}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x899a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x700}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xef6802}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb4c}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x31}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2da}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x55e98a3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf4d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6ff814de}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xcf42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1b}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf017}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x41}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xadfb}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xde}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc62c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x400}, 0x1, 0x0, 0x0, 0xc809}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r7) 14:40:45 executing program 4: 14:40:46 executing program 0: [ 535.832477][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:46 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000002780)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) [ 535.942707][T13821] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 535.964199][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:46 executing program 2: unshare(0x40600) [ 536.105696][T13826] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = signalfd(r1, &(0x7f00000000c0)={[0x6]}, 0x8) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000100)='syz1\x00') ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0xb40, 0xa0, 0x400, 0x240, 0x7ff, 0x5, 0x4, 0x2, {0x4, 0x7ff, 0x1}, {0x20}, {0xfffffffa, 0x2}, {0x4, 0x8, 0x2}, 0x2, 0x0, 0x4, 0x5, 0x1, 0x8e, 0xa5fd, 0x4, 0xa8, 0x3, 0x4, 0xffe9, 0xe, 0x2}) 14:40:46 executing program 4: r0 = socket(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 14:40:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:40:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 14:40:46 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000000)=0x2d) 14:40:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8, 0x6, 0x3f, 0x100, 0x20, @remote, @remote, 0x7800, 0x7800, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r3, 0x2f, 0x3, 0x1, 0x100, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0xe8, 0x6, 0x200}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f00000001c0)={0x1, 0x8000}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r6) [ 536.822068][T13843] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:47 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000000)) [ 536.956554][T13848] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000008b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000008b00)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xea4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x60, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0f3c533461ae"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x2c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @remote}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xe04, 0x4, 0x0, 0x1, [{0xe00, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xdf9, 0x1, "4f2274b19b8c484fed6dcc9f6212d3685cbe030aea535175f55e019d45586229ab9019f6a4c1fa7dc42b0ddad0aacd6fc7b154e61e70403b64c120cd032f2240eadf5a2629e39f4adf39b2999402d491416e7106780a7071b45a95e1576eba31dd88854a02e2f0b330317056b1a1a29c5a4f7dd873ec963fded54eb55c73c11124eb485ac8ee3a77289b4546454f1bddf152edb0b998c31d3c340b870773aafd0dd3d92f14d6e8fc7286d451f0b6ada28a37e1aed54e967d3fda0bd97c0d96cfd7aebdcde3ce0645aff7646a703a749f244bdc2cbc007801aa4da44498994dba5d83f24e9d535fbc52581e060ca349415183a61713dac1739bb015fc73eaeb287abba7c55cfeb6b6251038384f9fb8abf91d6eb1a4dd0da8be74dc6805849ab1667cfabe12eb524162f45d3c2ebb313b38a0144251dfe7f7e1d8dc41f4608fc3c88ceaededb85574ee68dc50f3fa91d37084baad675b1d04968f45a7b115a9d1feff0044140f7e445d2e087b2f06380336646ab5b0befb52226dde494141dd8486afb91b7fa48c21d77cd7b70cc888daadac634e850479dbf5cda2a0ba560853503cdf28cc0200067e90da803ad4c41dde75f33da2951cb98ecf4e76d9fff301d6ece6329ea5b11069ec8d5afffb59704c4507411e74c2bb036ba5e2a6ebf11014a3b0bdf920507f34a8d7bc8a30547a6be378dabc7601805180d93f1cca29743c80d2c57ae7c2b3940c6c9cbe6a848899cacc8ef95b1d3ce8a53e264b65a29e7910639a186aa2cb451ac3e3909154e9d0da03e90d277b12d994e05c8c9198498f1cf409d787b47e0f26a21d1c3f8cb6f3778a6181cbfe71edebcda2eac37ee1f6e5365639afaa0b71632fa8b9847e0590020aea97668473a35ecc4dd49230e494505b0f77ab3bbf7e3047aef40fb0a435db96d88bbfe0f0e3f84adae62e0873ba08d28c31244e5815a76737a28fe749c1c24357323d74b461147232eff406a2a663c0f51f93494deafe26ff177c9b4e5154c4591f34e58fe6b7a1eacdc00c7e5c94a0cf2f58ecea5748b2eb32c1c9e26201546a55bd3e8cb43f30de30342e614e45128db0a473740725d1c9f6ca6cb4ab1d2fa7141064018e9fe6e9a9543a5c365697b05d00a0cd344c0fae61bf04c7ea563c209b906c4c18ea5e5c7dde4bb26cc329a03c6de4ce6af89aedffd5d2e9cd353407e498fa4f2e24221508076807719a3ce65f3782238126241d42a26e77ff6496da344758697f4dcb352c5435e5818ac01cd6eaa8e768009bfa0905cd6885a993acef5fa21c975a723c0f84d2793020c88491e134ce59bf493dd4770278f874b539e74f28e5e85a4f184d4c61e649c1065867b082d1e36990a13927f83d07111971b31be56bbbc9486840f40021fe0a6f44feab56bc0cbd6fadb2569aba2abfe325d4a834e2b8fae96c413b151a1f422a216c56c3bd1c8ebf6ab3f5520cd74182b423cd5d0144559caac8e9cb43a09250cd4dc521ceee1cfae5e403c586a23e97b5241fbca438da2fb69a52cf186a9b143640eb0fa0f5efa6e98dd259b795e59de5163eed354e4337b7b729490f6a9ffbaeefa74c8e5b9bc1e1808d9001d13e2936427d736ac8c04c6f82e541e88763ffae45d6129d8343315cc7813e05bf8573cd4452fc827c485c278ba14e5d8579b36a33a3ddb2423a788e7b9c3ac5f0ba8149508f5221ba276234005359f85d2ecbefe9915a9a481702099ccb52f1e854ac9ebfec242530afb76434690c8d8d6220901ceeda639c02773c77f19936fc94e2fb04de9c39b5569855dcbbc955c2fc4b1449230149891f328cfb2884d7dd639a5c5fe00b24d18ec0af5fba97f8709836a2486c1b48006a54b42764381d9865ec7001325507868f06c7a5f181211b420dc60e110913edebc561776434321abf056af37f78c3e025ced71dbb33a8fca7724e8a8ab2f45a200d2d8124def52d994710bf54a8db2e41846b36baeac75768ee8637e24ba8b7d86fae2e87ac2b3fc3839b3fb2222b87e29faf3b1233aac9e825b03b2820677a16365cfd5e8b1b93ba8097022ef30bd7654f8196e3a3ac602da0e181d2b2d448de44a4d66fca595df409ff3642fad9e8144c2f5ed1b0d47ba871838867d38c26cba9c06901d29136210e0ff0bf0b72be0e3f87c04a6bc956c51874dc38adf6f9fe946dcdde33c1c9783632647208e9a4d9377fd95c0fce99e3bb010de1b2ee8e6130fad757f89e0a8a09e9bd2dd8d61148d295a82785362707a9ea1c58ef61c5f53db91d40acace0fe68e26f43f3c10ed757079c8d7f547444e071c0b73c9452a09082cc70c80be97f5c961ce78bf649f7cbd5174d687f877d6694d6e02296f72927696efb418d05ef1e13a6f3878482e68e0900fea017c653f9c4864e52181a2ecb2c8194cac89066cd3cee285d6fabb1ceee86476ef5ba8f69703e4ebc4fa79847d00e26e574ea8a64e35ff53d7b94954ec789185852bc5ca34ed549df7e1c197013b09cd77059ef76b5d584e94fd583f33562b75f580be98b42b3cd714eac379dba23fa105c84d70f68032f5a681d5b3295c027d691f0956720c4be0d5101a7e2d34b2b4df72345817aed3107e29e45c66564e3e486002a1b26d8989174d989844987425d82ca0a02adc9b891a4b85d4a1a74e7956fa82c13b205708d7de14063523021645cb70ea13f52ccdb0e23134fef3d636938a42022a40237308b609eabf2394f6b00e473ee68c62be8a826fef0cc5bf01d5dd012b62d24b006756f4847066e3530bad6cbbded43fe12333ee905e9e7b53cc76f03b557c6a01db88fb8df5012643c9b8f019f28c4e729eb912b037d8bf9ed3dddd9109bc5aa9df45403437d4e364398163ff7e200f8756761bbc8ac26e346a0587f9fb1def6eb64660cdff094edd3f2128c818d70a6d948b3fbb8349ec7a7708925b9903ab603a24762ff09048b803486f9949e62bf98f5664ed641a5fcffc99f94c90ae2c1be2eae48052f6737751aa70f3a0be5e30a508318104493f20bb448e27edfe677af8aa34dca18f8a8a95fe7df5f77250e5a315618bf3daf3ff0fd407310ae2104bb6a70540d2646350273c2ae0ae0d2db0d41d432335419bf8592078e5e0ac1b58dae9e64b80e0d079cfe5b38f525701772144cc64fe494ed89a5ffb73d7ea4809365d3ce6bd159afc02647cc99d13f529666af5a8ef69e7be3c419f6967509e67d2114b8947279cc86f32cfbedb78e4d2e1fdae30d447bef4e0aec10047e3153118f952ce84940f1abd60726bb8eda3c65971535fa663702e38e817cfcbfdc2df580e1faccc75a833c92faee08188577319737952a89225ddd3c902a486ae8413eb50fd76286dd7d6c58b816499f8ecc1194b1a17d68e7c68f80043251edd85731b68721d2343fa44e8f8b574b820e40dfcde6d6e28a3fcf3a99f44eff243632605cd939ec0b68fc361343c2eefee029e759af36b971092bbb039dded4e2796450e6ca587cba9677424f9d0a3c28c3535a460be87e2cf6a277452a6feafa96fd945355b0187f05f84a41b4a0f68f4b808eb77823bda835c2e864466a719b086fdef7045b4cc745097bc838075f5ca1f18fa4200584ef6296295606e228126795c29d6722e97b79aca924d6aafe487d44874f799b16cffe7db91bdabd7d822ef7f4f44ff4850dcb749d739021a4c0a7061886ace57857c048c1196c0b8acec3226c869b7b1278c066f5f47c880c48635da99f71d883896a241ec5d758c828957a3078a191921155bab9a20c85c0c294b29fe5b23f5571fce714d8b545e8863812e3262fe6e0e616bf03c09389ed61e3ce28c6aaaf7a910767c6d6a70cccd0bf9f5795a1b56620a97f466312d8e9bac683b4d4fedb9d10ada12b8a321be9229f72ddfe93d60077d5a0025f258ae71009f02feb6c15edc7bff6f68ab4c54f189406eafe0c864903de3736ab12504b437716b0b22a38af6587cb9c8356961120112e9f2d08d81491f7ff94858ffb08992ad9aa0f63b7067d690352a9db1428a2c811a95a1de56d707fbfa301e8738fbdd5c55ea44eddeb2488af38b7692696ada725272d3e4057f124473bee1459c2191bf1424669a8bf8d670e70e10580073e9c74ed3fcc5921c47b15fb26eb93e6a264fa1146ad9bf8ca1439493a1e08459cef8a3280e07e06b0f538790fc6bd5d6efe6aa91abb5a700244f3fb94eadbf4d5a32284379d0c36570f74c07eedf1ab5b9cd13409371f1d4de738ff4a9564c6c211f83a3bf5d10fddb4fb31b7e17d9ef8627f3fc4d4756140470f3af7ad25ae1d42694c0824582055c4f509394ca2c330417b5f9935c5f8532f9a3ad489e733c4a8c7fc7b0ba7f345ddc91b398d92bed4736c74ab1587050b346f45bff579f69e96bf2dffbf7c360c76b344064ad2a3742256c8227eda8ea2336824ea6b590f972cb4bd62ff9ba5312e037771bec982379f36c94833c330ba884e9d42d03d6b2aaede8eaa695224393a1133478b03c8848223c366dae22820413431d5e36816159a59ef613a33a9c33eb1acd95cc3c9eca20810df6558d6c7f9b651e51a508b20916af04596ced3306839e8781df72457324dc1f50f2196a07b2d3998d7b51941d6cc49d59ac9317308a0db0ccf56275a74b0deed7a4a420cc4c9d4e7fcca04d60a46a56faab55c77ff4bd0cd819b8792ec6b30f7b89eea28bd8accb146197382cf9910014f9be6a1d275fd4dac72a1fa485c9bfa56a8b7a0e708534d5577b45e47516a088216ffdaab37ce6a4adc8aff8fc6aa9915ad44f5036c3ef9cb99eb387a0c55d4a8c7de6cda6913373bb69d86addd67e79baf002cfcca87cd07d0e994663f63d221485528ba1cd32d3dd8d6960459edf26170d08d3d8cbb0f5bb4a591962b7ee04b4753a8e0e53519487225ecdbf8fd3e3f26583172776915fff2717011ca364f1fbd4afa0e34a4663fdd6aa712d3b059ee555b3a3ed91bedf82535c0cc1f8c8d4e31e511b67653242cbe587e3be713f770929445ac51dbfa1414f216e4a731be6c81fa37443dd89ba45a380241"}]}]}]}]}, 0xec4}}, 0x0) 14:40:47 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) 14:40:47 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000000)=0x2d) 14:40:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5e02, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:47 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/uinput\x00', 0x0, 0x0) 14:40:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r1) 14:40:47 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0xab4}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 14:40:47 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000240)=""/122) 14:40:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)) 14:40:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 14:40:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:48 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='pagemap\x00') r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/nf_conntrack\x00') pread64(r5, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x2, 0x2040, {}, {0x5, 0x0, 0x5, 0x7c, 0x2, 0x12}, 0x1, 0x1, @planes=&(0x7f0000000000)={0x9, 0xc86a, @userptr=0x100000001, 0x8}, 0x101, 0x0, r3}) dup2(r1, r5) 14:40:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000000)={'vlan1\x00', @ifru_mtu}) [ 538.377272][T13890] validate_nla: 2 callbacks suppressed [ 538.377314][T13890] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 14:40:48 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000000000)) [ 538.502542][T13893] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/uinput\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 14:40:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x44480, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) dup2(r0, r3) 14:40:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:49 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000000)) 14:40:49 executing program 2: r0 = gettid() waitid(0x2, r0, &(0x7f0000000080), 0x2, 0x0) 14:40:49 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0) 14:40:49 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu}) [ 539.196883][T13912] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 539.285928][T13917] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001b80)={'ip_vti0\x00', 0x0}) 14:40:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) 14:40:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:49 executing program 0: 14:40:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021004032300000028bd7000fedbdf25190018007ffdbc00efdd5bb59481fd76085e266b2025b4b46c11d756da55b1a6443e6917fbc1bf5ba6a8d30a2200cdd2675cd7692dc3960d8ad958f23dad99752a4aab8f8feebfee6d5d9167fe8cf87dfc411c7afa02dad1fde44ce295760328036bbf624bfd6d61f3c1c2e4063f45f563d15947074f12162dbb1bc2430c2d54cee12dae1e7c90e6573d7373aeb629eda3e46c2e9d800ec30aabc703000011fd3f58ec260e96ce2001efeb19d444be096198ebc536367d5402ef849338b1f2354120b781df00000000020013000400000029bd7000063500bbc372c62718d40002001000000004d5000004d50000000002001000000004d2000004d60000000002000100000004d40003ee04012d6c000000757a5aa8d58eeb8be3c7fe266b5c8d124e39aec5d85b68b0b0c4aeb3e46115b12e56a5bbf780018f6b34bfa1257cc262e6014255cd237c8e7766d1e26bdc8e3e1bc369ff517999fa04dad4ad37d8577cec4265978d19b57ce551986fed3126d7b02c410c966dbef4b79b985e29daa0c4dd0a6cfb5c97e692a496abdfc6ce5046464ead4442dbe72a07aff3d81a7115d90ed1818e3612ba8d2c83a1cd74f1d9ac3d86f0fea5bc2674b7d438c768f45dd2c10fa2e0e0f1475b8041b0e9d96184bd95bc9ae4c3c2b31ff24a1aa1cb"], 0x118}}, 0x80c0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') dup2(r0, r3) 14:40:49 executing program 4: [ 539.901592][T13934] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:50 executing program 5: [ 540.016756][T13940] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:50 executing program 0: 14:40:50 executing program 2: 14:40:50 executing program 4: 14:40:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = dup2(r0, r3) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000000)) 14:40:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:50 executing program 5: 14:40:50 executing program 0: [ 540.663407][T13951] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:50 executing program 2: [ 540.780937][T13956] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:51 executing program 4: 14:40:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') dup2(r0, r3) 14:40:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7400, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:51 executing program 5: 14:40:51 executing program 0: 14:40:51 executing program 2: 14:40:51 executing program 4: [ 541.451374][T13970] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:51 executing program 5: 14:40:51 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r1, r4) [ 541.552387][T13974] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:51 executing program 0: 14:40:51 executing program 2: 14:40:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:52 executing program 4: 14:40:52 executing program 5: 14:40:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r0, &(0x7f0000000000)=""/35, 0x23, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) move_mount(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x40) r5 = dup2(r1, r1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r6) 14:40:52 executing program 0: 14:40:52 executing program 2: 14:40:52 executing program 4: 14:40:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:52 executing program 5: 14:40:52 executing program 0: 14:40:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x5, 0x81, 0x4, 0x51c, r2, 0x74, [], 0x0, r2, 0x1, 0x5, 0x1}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001340)='/dev/input/mice\x00', 0x50042) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001380)={&(0x7f0000001080)="0ebe538ec58e5e75929ed91e04374ef687689a4d9d22ef0025b6d7314e73cd106d4bcd896811c8740f53197141ef9f386417ff22d8f676b7aa1587baae48a00212ace1ce28dbbe2edd46b45637a8c648fde2f0e0eda0ee32a311e4839c7a55d392b14813664a06e41fee68183cef5eaf97910fd89094f5d9651bc60780e6ae951f177227d73794607c8dc64dabd9da2c757dc147f310366e3305b3e31c8753074109ea2d36c741db11cb39682b", &(0x7f0000001140)=""/132, &(0x7f0000001200)="392344ef92c7c7e18b461375af7c9477126710bbe22c12abdc89749c4846a11630d7f8ffebb17e45134849adae2eaf5d0f237c39149bbb1d62c54ade20d82c022e77a99d2a226d4cb13727284544bb75ceaef7469c3ebae226f4a7a274d9e4349c6a184eea0df6869bc617eb4591817f8b50ea8e99bde65537b73283578a74c121c2fd840f284ef830675e5f612587ff80d5744705483476ae77136ecbed98d35db79e57e2e0593662974fee72ba76ad96214841d90251d605", &(0x7f00000012c0)="e9ef803ba6c7b5b8e40bd81a443282cfb25a1666cbc2f972d86720ea1513a7fcd2bd670c248328a54d0ec7e7e68dde754f25d5a08d165acbf82076923224044d2bf266b94b4637928a357830876f8721c156b99cfaffcdb7e0646fde8f487d499740186ee70a25", 0x7, r5, 0x4}, 0x38) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000080)={{r4}, "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"}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') dup2(r0, r6) 14:40:53 executing program 2: r0 = socket$unix(0x2, 0x5, 0x0) getpeername$unix(r0, 0x0, 0x0) 14:40:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 14:40:53 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) 14:40:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x0) 14:40:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8847, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000080)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@generic="118cd28bde7b878ad44790d15c8dc225d41f8c33c24c39a8875d57e81b4fdabdc2e590029fb70e6abb5e139abd8e70e1daa2b25992f32df1230f30ffa58004db6e8862fe82862b53602f5fd553a52c4161991d21f96f2ae3b522ca2e5151", @nested={0xe4d, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="22996cf50f10054cac150ef442f9c30652e821ecfb76a8cc5f4cf9c04955", @generic="6a4a00649c182611ad5b2d37d439ddd4322337a119dfdac04814d08652fdf1ace7712b61", @generic="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"]}]}, 0xec4}}, 0x0) 14:40:53 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 14:40:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) dup2(r0, r3) [ 543.776556][T14023] validate_nla: 4 callbacks suppressed [ 543.776592][T14023] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:54 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x0, 0xc00, 0x0, 0x3}, 0x20) [ 543.910915][T14030] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:54 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000023c0)={&(0x7f00000000c0)=@isdn, 0x80, 0x0}, 0x0) 14:40:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x93, 0x0, 0x8}, 0x40) 14:40:54 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) 14:40:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8848, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:54 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendto$l2tp6(r0, &(0x7f0000000040)="bbe371dc5045d9e2e0e6e846b036ef467d83e56966fb7755977ad0a39e12c17c8a402698eb1514ea81ba783b9ae54676db55c34ab810486690d98224785351d534bc09a4b8902ac737254a5c33d2bb33ca5a393ec139b11ceeefda985db3aa0e7e9e3635ff41568393c31e1e8e5327733215b68d2e058d6f0904f92e", 0x7c, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0, 0x1, 0x3}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r1, r4) 14:40:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_addrs=@generic}) [ 544.519393][T14046] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:54 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) [ 544.617151][T14052] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:54 executing program 2: 14:40:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000427bd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000900010000205f6be4fcd71cd255cf93b1f0495519701d88414d65161b844bf2d167e804bd786cb93412c3436c4d606a9c1862c8264fb493af88ece52ba106710eac77cb8648a22cfadae8823d6baa98560c7afb4da165574299d3461c91b0311066a4d29317c49fbebcde71485e54cb8d8cbd7ccb1374369fd43b65ce67c6666574177b5d3b0f30c5fd28bdddb3f4e48e0118f3a4f66b5aa81478b33962ba519ff4fcd4dff7d288d00ed019e9d800812c0f5cd5764cd42d06a9fb37e971"], 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x20004010) 14:40:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa003, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:55 executing program 5: 14:40:55 executing program 4: [ 545.338344][T14067] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 545.448982][T14073] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:55 executing program 0: 14:40:55 executing program 2: 14:40:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r0, 0xfffffffffffffffd, 0x900, 0x80200000000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104815f000000000000000c0000", @ANYRES32=r7, @ANYBLOB="0000000000000039140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r8, 0x0, r9) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2f}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc8}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r12) 14:40:55 executing program 5: 14:40:55 executing program 4: 14:40:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfeff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 545.765214][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:40:56 executing program 2: [ 545.928689][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.957518][T14078] PF_BRIDGE: br_mdb_parse() with invalid ifindex 14:40:56 executing program 0: [ 546.113790][T14090] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:56 executing program 5: 14:40:56 executing program 4: [ 546.211134][T14093] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0xbc, 0x4, 0x1000}) r3 = dup2(r1, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000000)={0x998, 0x3, 0x4, 0x2000, 0xf4, {0x0, 0xea60}, {0x4, 0x8, 0x1, 0x3f, 0x81, 0x2, "940602e1"}, 0x3f, 0x1, @offset=0x1, 0x80000ff, 0x0, r5}) read$char_usb(r4, &(0x7f0000000240)=""/23, 0x17) r6 = accept4(r2, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000140)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001f40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002000)={'sit0\x00', &(0x7f0000001f80)={'ip6tnl0\x00', r7, 0x2d, 0x6, 0x2, 0x5d, 0x60, @private0, @ipv4={[], [], @multicast2}, 0x7, 0x0, 0x2}}) dup2(r0, r5) 14:40:56 executing program 2: 14:40:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="1e3a32b94f73d59aedec88cacd9f61d8bdbeb9a7d64b1f88b3669639622da4186c22251a7ead1e8b156918b6b19c216296c92d9639a49f5aecb4784d6d586f68a064615e7230ed2256021f1ee9048d4ad2028aeb968b54d559424ce1f9afedb2b22fb85b1dac477f83d3fe0ff3ac5a32a9b5ec082ee458639ffcac6333c6686148a7fbbd63d7414ee3a3d1faa2c9e7b907aef69f2b7a656646456d7cabd3dd26f027f61bd61f594825e3b51e9ed703b81e", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 14:40:56 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x10}, {&(0x7f0000000200)="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", 0x12c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 14:40:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="1e3a32b94f73d59aedec88cacd9f61d8bdbeb9a7d64b1f88b3669639622da4186c22251a7ead1e8b156918b6b19c216296c92d9639a49f5aecb4784d6d586f68a064615e7230ed2256021f1ee9048d4ad2028aeb968b54d559424ce1f9afedb2b22fb85b1dac477f83d3fe0ff3ac5a32a9b5ec082ee458639ffcac6333c6686148a7fbbd63d7414ee3a3d1faa2c9e7b907aef69f2b7a656646456d7cabd3dd26f027f61bd61f594825e3b51e9ed703b81e98611308317d3cae7e9a066cb8e7a615c33f07c32d44439c2d05373e8f692fb6bdb0a4abe5967aca71d09dec186a7c8108716d8b46c01487cf6bd4e96b11ce2312a7000000000000", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 14:40:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBSENT(r0, 0x4b31, 0x0) 14:40:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r2, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010100}}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045) [ 546.994512][T14108] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 547.062193][T14114] ptrace attach of "/root/syz-executor.5"[14113] was attempted by "/root/syz-executor.5"[14114] 14:40:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664c3fd64362f39caf17d73cb9618953b893925af523365e54ca6517c5974f4c48e490865e0fab9dd440c15c15593785f57589097e5eec4f7952546b4e69d6ef967736d14a0b48f177410cbe01de4698d8b364e4eebe7dd07ac79641152430ff0925dc12e43a4b7ed995bbbb2516885446e7bb243491945ac98f982f8557d2dc9404454000a58ac44323ee87f7eded61597d4c0abe1f9c3ccb060b85f3347e9f7b", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x25) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 547.103712][T14117] ptrace attach of "/root/syz-executor.4"[14115] was attempted by "/root/syz-executor.4"[14117] [ 547.129661][T14118] ptrace attach of "/root/syz-executor.0"[14116] was attempted by "/root/syz-executor.0"[14118] 14:40:57 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0xffffffffffffff88}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000019540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0x7, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @func, @union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @volatile, @typedef, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x15f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:40:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x80045430, &(0x7f0000001640)) [ 547.165234][T14122] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 14:40:57 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback=0x7f000007}, 0x10) [ 547.452240][T14137] ptrace attach of "/root/syz-executor.4"[14135] was attempted by "/root/syz-executor.4"[14137] [ 547.482912][T14138] ptrace attach of "/root/syz-executor.5"[14134] was attempted by "/root/syz-executor.5"[14138] 14:40:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x1}, &(0x7f00000000c0)=0x20) 14:40:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff7f, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2442c1, 0x0) write$binfmt_elf32(r3, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x90, 0x8, 0x8b, 0x0, 0x81, 0x2, 0x3, 0x3, 0x18b, 0x38, 0xbf, 0x7f, 0x200, 0x20, 0x1, 0x3f, 0x32, 0x5}, [{0x1, 0xfff, 0xffffff84, 0x8, 0x141d, 0xd43, 0xfc, 0x401}, {0x6474e551, 0x1000, 0x8001, 0x8, 0x8000, 0x7a, 0x2, 0x5}], "ceafa71c481d790e8e2a2bfef17ee129becf66ff4dd3e64b109edb9474580788e716793554c30c138614b4bdecb7c839d653416ec0a429c01943344f9f787b2862c7b5bd86bc5dd5e82f80d8189dfa297d2c8087b56e57aba1dea105d3dc0293d4ef45a95810d935455aea17f534c2acdb44b5aa40e3946fd8c81aad45cd619ae83193a1e66ab59a98116295e39f45d08faaad5a04f289bf", [[], [], []]}, 0x410) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:40:58 executing program 0: r0 = gettid() tgkill(0x0, r0, 0x0) 14:40:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 14:40:58 executing program 2: syz_open_dev$evdev(&(0x7f0000004440)='/dev/input/event#\x00', 0x0, 0x50240) 14:40:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0xed, 0x0, 0x7ff, 0x0, "eec690a5aa8f5f2fa01e549c828205e8eeff78795be4d4b16c11fbb3e31fe443"}) 14:40:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000000)={0x2, 0x3, 0x7, 0x5, 0x2, 0x3}) 14:40:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x8000450a, 0x21000000) 14:40:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000002400)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 14:40:58 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x40381) write$hidraw(r0, &(0x7f0000000100)="49ef42a52da9aa153a2c4a06f6bdd0a7aa21f321512e1e30937dfca564a109b1137d670f671c1d5d59e19d09303127836e0e35c351391fee69e9e9e99b9a4300336aa6ec90ce9508957c053f32637b226757e29498e1c2d7de615c61e52f08ec5920ae08571b1abb42db64cbbb", 0x6d) write$hidraw(r0, &(0x7f0000001540)="035bf2106a049c155f003af33712bcbff98b3e3074fac7c3a1737b4cd3a75ca0fcda380b0be8689ca1d92ed9c7a4308fa611760e86d74403221172d8b2c2a3579570692de7755e181dfc9c2614bd4a9b0653840e43604ca86c8af3491a0431e353072713765adb2da75f47994d72691d61a9ff21cb5279b60d507aa4a71dcfaaee08", 0x82) [ 548.794058][T14181] validate_nla: 3 callbacks suppressed [ 548.794096][T14181] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) pipe2(&(0x7f0000000000), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x10001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:40:59 executing program 5: faccessat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) [ 548.989193][ T8733] Bluetooth: hci3: command 0x0406 tx timeout 14:40:59 executing program 0: 14:40:59 executing program 4: 14:40:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12d34, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:40:59 executing program 2: 14:40:59 executing program 5: 14:40:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xa0ba, 0x400000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r7, 0x800443d2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{@fixed}, {@none}]}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r8) [ 549.535677][T14198] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:59 executing program 0: [ 549.646789][T14201] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:40:59 executing program 4: 14:41:00 executing program 2: 14:41:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:00 executing program 5: [ 550.061868][T14207] nvme_fabrics: missing parameter 'transport=%s' [ 550.068313][T14207] nvme_fabrics: missing parameter 'nqn=%s' [ 550.135185][T14210] nvme_fabrics: missing parameter 'transport=%s' [ 550.142010][T14210] nvme_fabrics: missing parameter 'nqn=%s' 14:41:00 executing program 0: 14:41:00 executing program 4: 14:41:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x1f, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x8b, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x2, 0xe0}}]}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x1f, 0x80, 0x10, 0xfa}, 0x10a, &(0x7f00000001c0)={0x5, 0xf, 0x10a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x5, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xfd, 0x1, 0x40}, @ptm_cap={0x3}, @generic={0xf1, 0x10, 0x3, "dd45469ee5b2f3ce2baba301efaff60bb7877644d74fba18cc28593bc8280567b2429cc9e6eeea82586d58935b1a9091e4dd6d8076cfd03e592f06249eaadcf991384b503d8346f59ad0f4c338ece5a29fe6c9b2795ff12fc12a1bf1891eb8cb53cbc5e2ecd8d73803aeca0b309fcbc0ace721c6da1a20323acd7deed659c3048fe54bb6b82be80b51b5ec5d6a03b92b2b50598734efe0bc5075be5e16dcc8601109959b2f095b0a28f711506d27bbfc5ce74098679aaa2cbc74970946b741f631f3c488190991955b109db65a5008c89c85536f180988b945971bc2dbb03ec69686831ea6bcde293c58d6a8f6e3"}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x404}}]}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, r2) [ 550.362264][T14218] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:00 executing program 2: [ 550.524237][T14221] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:00 executing program 5: 14:41:00 executing program 4: 14:41:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2d2cc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:01 executing program 0: 14:41:01 executing program 2: [ 551.048569][ T8733] usb 4-1: new high-speed USB device number 3 using dummy_hcd 14:41:01 executing program 5: 14:41:01 executing program 4: [ 551.199436][T14235] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:01 executing program 0: [ 551.268918][T14238] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 551.301256][ T8733] usb 4-1: Using ep0 maxpacket: 8 14:41:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 551.520539][ T8733] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 8 [ 551.530580][ T8733] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 64 [ 551.540801][ T8733] usb 4-1: config 1 interface 0 has no altsetting 0 14:41:01 executing program 2: futex(&(0x7f0000000040)=0x1, 0x9, 0x1, &(0x7f0000000080), 0x0, 0x1) [ 551.789462][ T8733] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.798746][ T8733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.806876][ T8733] usb 4-1: Product: syz [ 551.811365][ T8733] usb 4-1: Manufacturer: syz [ 551.816129][ T8733] usb 4-1: SerialNumber: syz [ 551.896543][T14247] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 551.932894][ T8733] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 552.021881][T14253] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) dup3(r4, r2, 0x80000) 14:41:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 14:41:03 executing program 5: remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x500000d, 0x0, 0x0) 14:41:03 executing program 0: r0 = socket(0x2, 0x3, 0x40) sendmsg$unix(r0, &(0x7f0000000800)={&(0x7f0000000200)=@abs, 0x6e, 0x0}, 0x0) 14:41:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'lo\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 14:41:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 553.751273][ T8719] usb 4-1: USB disconnect, device number 3 [ 553.904957][T14270] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 553.934210][T14273] x_tables: duplicate underflow at hook 3 14:41:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) [ 554.043889][T14278] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 554.088738][T14280] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:04 executing program 2: 14:41:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 14:41:04 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 14:41:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)={0x3, "f16065"}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0xfc, 0x80, 0x4}]}, 0x10) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip_vs\x00') dup2(r0, r5) 14:41:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) [ 554.676370][T14293] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000400", @ANYRES32=r6], 0x24}}, 0x0) [ 554.828886][T14306] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:05 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) lstat(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 14:41:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:05 executing program 0: 14:41:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) migrate_pages(r2, 0x7, &(0x7f0000000240)=0xc0e, &(0x7f0000000280)=0x5) r3 = syz_open_dev$char_raw(&(0x7f0000000140)='/dev/raw/raw#\x00', 0x1, 0x280400) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="793ba25d8f163e9faf5404bfc1d485f2e5250a963470d2281c589ba07726c5eeba4a7645666fa33e9299dd475bd966524ecd8001d204f6549140222945f08672b86d9a9a4908c9fc3c42565df5d7909a7f09ac74978cfa9dbfa70f95625085dde1b85452a77a6d5cc6130634421be983670030fa2e56e74c672f4256e9d29c46bfabed0b6fb0132e33f0bf4b51f9d803b4bb9dccb00df41c0b68dc73464f89441b701b5a7b0ef1ec46369d28a69f6386f3f628c6bc2ab89edef5db450e1cd9fe41886086f20752a3ab3c3acd0c46f6a37296403ddb36e2f2394b81feee474a8dcd90f6fd569f0dc3ef0f7a", 0xeb}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/50) dup2(r0, r5) 14:41:05 executing program 5: 14:41:05 executing program 2: [ 555.471474][T14322] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 555.593308][T14330] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000080)={0x7, "e5f9607d8d0b2a0a06ff915ae3d65bd8ca043e394e2c2f96cc42e8bab0878ecd", 0x2}) 14:41:05 executing program 0: 14:41:06 executing program 5: 14:41:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x100000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:06 executing program 2: 14:41:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x2, 0xffffffff, 0x4, 0x3f, 0xfffffffd, 0x4d5f5ffc}) r2 = dup2(r1, r1) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x503100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:41:06 executing program 4: 14:41:06 executing program 0: [ 556.391288][T14342] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:06 executing program 5: 14:41:06 executing program 2: [ 556.514110][T14345] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:06 executing program 4: 14:41:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0xa1c8, 0x8, 0x1, 0x7, 0x0, [0x7, 0x6, 0x0, 0x3]}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10}, 0x10) r4 = dup2(r0, r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x480d4}, 0x20014) 14:41:07 executing program 0: 14:41:07 executing program 2: 14:41:07 executing program 5: [ 557.153160][T14360] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:07 executing program 4: [ 557.289014][T14365] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0xd36) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') pread64(r4, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000080)={0x101, 0x6}) r5 = dup(r0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001640)='/dev/nvram\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001680)={0x8, 0x3, 0x0, 0x4, 0x9, 0x8, 0x0, 0x9}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r7) 14:41:07 executing program 0: 14:41:07 executing program 2: 14:41:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:07 executing program 5: 14:41:07 executing program 4: 14:41:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_raw(r2, &(0x7f0000001500)={&(0x7f0000001380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1, &(0x7f00000014c0)=""/58, 0x3a}, 0x41) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x8080) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x42102) fstatfs(r6, &(0x7f00000001c0)=""/64) r7 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xd3, 0x3}, &(0x7f0000000140)=0x90) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101100, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) dup2(r0, r4) 14:41:08 executing program 2: 14:41:08 executing program 0: 14:41:08 executing program 5: 14:41:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:08 executing program 4: 14:41:08 executing program 2: 14:41:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1000, 0x7, 0x3400}, 0x1c) 14:41:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 14:41:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x88, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40c0}, 0x20008881) ioctl$VT_DISALLOCATE(r2, 0x5608) 14:41:09 executing program 4: r0 = eventfd(0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000000)="ffffffffffffffff", 0x8}], 0x1) 14:41:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2010000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, &(0x7f00000000c0), 0x4) 14:41:09 executing program 0: io_setup(0x202, &(0x7f0000000200)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x12880000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:41:09 executing program 4: [ 559.376063][T14416] validate_nla: 4 callbacks suppressed [ 559.376097][T14416] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:09 executing program 3: ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x599, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace$cont(0x18, r4, 0xffffdffffffffffc, 0x200000000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r5) [ 559.520977][T14420] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) 14:41:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x14, 0x0, 0x4) 14:41:10 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="9eb25029b955037e1df8788f97b77846855dbbdd8586194df4fd850c8df65379822cb39ff3402ed2586702a2513aae896bee272c8fbaca4ca0d82ac26efbbc23e0db2f", 0x43}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x941}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 14:41:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:10 executing program 5: timer_create(0xbecfb6b3f04dc256, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)) 14:41:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x1, 0x20, 0x1, 0x3f, @tick=0x6, {0x0, 0x18}, {0x8, 0xc1}, @note={0x8, 0x6, 0x1, 0x0, 0x20}}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) dup2(r5, r6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000001c0)={0x0, 0x1, 0xe9c0000000}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000005c0)={r7, "c891dd928f4cc8c5ea4d74c07543deba"}) [ 560.275700][T14439] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:10 executing program 2: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 14:41:10 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x14, 0x0, 0x2}, 0x0) [ 560.487915][T14444] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}], 0x2, 0x0, 0x0) 14:41:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r1, 0x0, r0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 14:41:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1f, 0x410000) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000040)={0x3, "4f4dbc953614d369948f7eb2c325ab44bb44f3282e3bb23bc14a67b8c17a09a3", 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000080)) dup2(r0, r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0x3000) 14:41:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:11 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0xd63c6000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:41:11 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="9eb25029b955037e1df8788f97b77846855dbbdd8586194df4fd850c8df65379822cb39ff3402ed2586702a2513aae896bee272c8fbaca4ca0d82ac26efbbc23e0db2f50cffd53b28f26827a8694b5d6059f88", 0x53}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x941}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 561.048534][T14459] new mount options do not match the existing superblock, will be ignored [ 561.109749][T14463] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 561.133860][T14459] new mount options do not match the existing superblock, will be ignored [ 561.257938][T14471] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220}) 14:41:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}], 0x2, 0x0, 0x0) 14:41:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002001) [ 561.866405][T14485] new mount options do not match the existing superblock, will be ignored 14:41:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x7c, 0x0, &(0x7f0000000680)=[@request_death, @increfs_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x1, 0x0, &(0x7f0000000800)="bb"}) [ 561.992096][T14488] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:12 executing program 5: socketpair$unix(0xa, 0x6, 0x0, &(0x7f0000000000)) [ 562.162919][T14491] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x3e, 0x0, &(0x7f0000000200)) 14:41:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x2b, 0x0, &(0x7f0000000200)) 14:41:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = signalfd4(r1, &(0x7f0000000000)={[0xb713]}, 0x8, 0xc0800) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x2, 0x9, 0x4f, 0x0, 0xffff, 0x1, 0x2000, [], 0xfffffff7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:41:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x2e, 0x0, &(0x7f0000000200)) 14:41:12 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="9eb25029b955037e1df8788f97b77846855dbbdd8586194df4fd850c8df65379822cb39ff3402ed2586702a2513aae896bee272c8fbaca4ca0d82ac26efbbc23e0db", 0x42}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x941}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 14:41:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x2f, 0x0, &(0x7f0000000200)) [ 562.792529][T14509] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 562.962453][T14514] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="250000002c00010e94d2cd99d16a2d6b6e916b212e271a91eb8d36c73a80293a55269d"], 0x2c}}, 0x0) 14:41:13 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1402) 14:41:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000540)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', r3, 0x2f, 0x0, 0x3, 0x1, 0x0, @private2={0xfc, 0x2, [], 0x1}, @private0, 0x10, 0x80, 0x7fff, 0x800}}) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="2e152841b0fc7dd104dd2fb22c0c2140c06c85fbb0d79c2f7b545b13640e14c4c2901cd00c99ebda458cd05317d705aad2f3d33c473b6ae82b8f5ac1f8103de447af73f653d4ea20dc95f27b8c7a2f283b7c4ad4642e6759abbe268374a0339290312d9c0051147bce1bf951054191b1aaeb3f7108ca273708e3b1d4fd4aae0c8f5870985edc74aa1bfe8dc455eaee6a6b9fb2bcfd4c4c156e9d2723eb46dd4d", 0xa0) setsockopt$inet6_buf(r6, 0x29, 0xd3, &(0x7f0000000000)="eae225a672", 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$bt_hidp(0x1f, 0x3, 0x6) r10 = dup2(r9, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r8) 14:41:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0xfd65) [ 563.372973][T14525] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x3c, 0x0, &(0x7f0000000200)) 14:41:13 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="9eb25029b955037e1df8788f97b77846855dbbdd8586194df4fd850c8df65379822cb39ff3402ed2586702a2513aae896bee272c8fbaca4ca0d8", 0x3a}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) 14:41:13 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="9eb25029b955037e1df8788f97b77846855dbbdd8586194df4fd850c8df65379822cb39ff3402ed2586702a2513aae896bee272c8fbaca4ca0d8", 0x3a}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x941}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 14:41:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:41:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x1, 0x0, 0x11, &(0x7f0000000340)="3ef083581134ae6dfb7b16a44077fb3f07"}) 14:41:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) getsockname(r0, &(0x7f00000045c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004640)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004700)={0x6, 0x1, &(0x7f0000004440)=@raw=[@call], &(0x7f0000004480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:41:14 executing program 0: clone(0x12880000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0) 14:41:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3ff], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:41:14 executing program 5: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:14 executing program 2: unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 14:41:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:15 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "130205", 0x0, 0x3c, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}}}, 0x0) 14:41:15 executing program 0: unshare(0x400) r0 = socket(0x1e, 0x1, 0x0) ftruncate(r0, 0x0) [ 565.120116][T14581] validate_nla: 4 callbacks suppressed [ 565.120151][T14581] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIONCLEX(r1, 0x5450) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) 14:41:15 executing program 5: socketpair$unix(0x1, 0x18, 0x0, 0x0) [ 565.257752][T14585] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:15 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x82}, 0x0) 14:41:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:41:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}], 0x38}}], 0x1, 0x0) 14:41:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000116c0)={&(0x7f0000011540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x30]}}, &(0x7f0000011600)=""/164, 0x2d, 0xa4, 0x1}, 0x20) 14:41:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r5) 14:41:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x1a, 0x0, &(0x7f0000000200)) 14:41:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x1002, 0x4, 0x3c8, 0xe8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @loopback, @remote}}}, {{@arp={@multicast1, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 566.033862][T14606] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 566.156189][T14612] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x802, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) 14:41:16 executing program 5: clock_adjtime(0xa00, &(0x7f0000000180)) 14:41:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x4b, 0xf, &(0x7f0000000000)="db53ea5d78acd80fd9909b4983425e5dc1ec853fb922f98f241dc357b60de050cf9028c5bbf60ca066c6386a3a4250f0aa66db232effdefc84bcb7e88385cc8b111ca0bd6576aa198bde1d", &(0x7f0000000080)=""/15, 0x1, 0x0, 0xd, 0x33, &(0x7f00000000c0)="ad78bec84b0b8bce109b650d53", &(0x7f0000000100)="dec9bdbd8b592f0bd046aa015f20caef2bfaaf3a70b81d7c681f4d003c4588252b15928dca9443e716a40ed03826b8c817b0bb"}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r4) 14:41:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 566.410188][T14621] xt_NFQUEUE: number of total queues is 0 14:41:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40046304}], 0x0, 0x0, 0x0}) [ 566.472959][T14621] xt_NFQUEUE: number of total queues is 0 14:41:16 executing program 4: [ 566.872806][T14636] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 566.934133][T14640] binder: 14635:14640 ioctl c0306201 20000280 returned -22 14:41:17 executing program 5: [ 567.000401][T14641] binder: 14635:14641 ioctl c0306201 20000280 returned -22 [ 567.007074][T14642] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:17 executing program 0: 14:41:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') dup2(r0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) 14:41:17 executing program 4: 14:41:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:17 executing program 2: 14:41:17 executing program 5: 14:41:17 executing program 0: [ 567.644694][T14653] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 567.722461][T14659] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:18 executing program 3: 14:41:18 executing program 4: 14:41:18 executing program 5: 14:41:18 executing program 2: 14:41:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:18 executing program 0: [ 568.385226][T14669] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:18 executing program 5: 14:41:18 executing program 3: 14:41:18 executing program 4: [ 568.490681][T14673] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:18 executing program 2: 14:41:18 executing program 0: 14:41:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:19 executing program 4: 14:41:19 executing program 5: 14:41:19 executing program 3: 14:41:19 executing program 2: 14:41:19 executing program 0: 14:41:19 executing program 4: 14:41:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe090000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:19 executing program 5: 14:41:19 executing program 3: 14:41:19 executing program 2: 14:41:19 executing program 0: 14:41:20 executing program 4: 14:41:20 executing program 5: 14:41:20 executing program 3: 14:41:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:20 executing program 2: 14:41:20 executing program 0: 14:41:20 executing program 4: [ 570.498086][T14712] validate_nla: 4 callbacks suppressed [ 570.498121][T14712] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:20 executing program 5: 14:41:20 executing program 3: [ 570.640702][T14717] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:20 executing program 0: 14:41:21 executing program 2: 14:41:21 executing program 4: 14:41:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf090000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:21 executing program 5: 14:41:21 executing program 3: [ 571.335380][T14728] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:21 executing program 2: 14:41:21 executing program 4: 14:41:21 executing program 0: [ 571.443000][T14732] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:21 executing program 5: 14:41:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:22 executing program 3: 14:41:22 executing program 4: 14:41:22 executing program 2: 14:41:22 executing program 0: [ 572.042692][T14742] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:22 executing program 5: [ 572.148653][T14745] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:22 executing program 3: 14:41:22 executing program 2: 14:41:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:22 executing program 4: 14:41:22 executing program 4: 14:41:22 executing program 0: 14:41:22 executing program 5: [ 572.852547][T14758] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:23 executing program 3: 14:41:23 executing program 2: [ 572.996950][T14762] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:23 executing program 4: 14:41:23 executing program 5: 14:41:23 executing program 0: 14:41:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000080)) 14:41:23 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 14:41:23 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) [ 573.697024][T14774] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:41:24 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) getsockname$inet6(r0, 0x0, 0x0) [ 573.835332][T14779] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:24 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 14:41:24 executing program 4: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0xfffffffffffffffe}}, 0x0) 14:41:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:24 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 14:41:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) 14:41:24 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x2}, 0xc) 14:41:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x0) [ 574.584213][ T8719] Bluetooth: hci4: command 0x0406 tx timeout 14:41:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 14:41:25 executing program 2: 14:41:25 executing program 0: 14:41:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:25 executing program 5: 14:41:25 executing program 4: 14:41:25 executing program 2: 14:41:25 executing program 0: 14:41:25 executing program 3: 14:41:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2f000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:25 executing program 4: 14:41:26 executing program 5: 14:41:26 executing program 2: [ 575.984074][T14840] validate_nla: 4 callbacks suppressed [ 575.984109][T14840] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 576.100355][T14844] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:26 executing program 4: 14:41:26 executing program 0: 14:41:26 executing program 3: 14:41:26 executing program 5: 14:41:26 executing program 2: 14:41:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x32000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:26 executing program 0: 14:41:26 executing program 4: 14:41:26 executing program 3: [ 576.822852][T14856] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:27 executing program 5: [ 576.949138][T14859] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:27 executing program 2: 14:41:27 executing program 0: 14:41:27 executing program 4: 14:41:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x342d0100, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:27 executing program 3: 14:41:27 executing program 5: 14:41:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) [ 577.582915][T14871] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 577.737754][T14876] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:28 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) 14:41:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') write$char_raw(r0, 0x0, 0xfffffdf9) 14:41:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x34) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040), 0xc) 14:41:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3a000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:28 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000001600)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="ec", 0x5aa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003080)="b0", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000900)='=', 0x1}], 0x300}}], 0x5, 0x400d005) 14:41:28 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x22ed87032a0929ff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) 14:41:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x1, @broadcast}, 0x5a, {0x2, 0x0, @remote}}) 14:41:28 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x22ed87032a0929ff, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) [ 578.446305][T14893] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:28 executing program 3: r0 = socket(0x2, 0x3, 0x8c) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) 14:41:28 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000040)={@random="91d3420c00", @dev, @void, {@generic={0x8864}}}, 0x0) [ 578.630433][T14899] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x4, 0x4) 14:41:29 executing program 0: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x3f}], 0x1) 14:41:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@private2}, {@in6=@ipv4={[], [], @broadcast}}, @in6=@rand_addr=' \x01\x00'}}}, 0xf8}}, 0x0) 14:41:29 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @broadcast}}}}}, 0x0) 14:41:29 executing program 2: memfd_create(&(0x7f0000000080), 0x0) [ 579.225903][T14915] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 579.340256][T14922] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:29 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000000)={@random="ce77eb7c7188", @remote, @void, {@generic={0x8906}}}, 0x0) 14:41:29 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 14:41:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000141, 0x0) 14:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x40000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, 0xfffffffffffffffd) 14:41:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x301}, 0x20}}, 0x0) 14:41:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000160001"], 0xf8}}, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x8}, &(0x7f0000000200), 0x0) 14:41:30 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 580.160089][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 14:41:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 14:41:30 executing program 3: 14:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:30 executing program 2: 14:41:30 executing program 4: 14:41:30 executing program 5: [ 581.016163][T14957] validate_nla: 2 callbacks suppressed [ 581.016260][T14957] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 581.171663][T14968] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:31 executing program 0: 14:41:31 executing program 2: 14:41:31 executing program 5: 14:41:31 executing program 3: 14:41:31 executing program 4: 14:41:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:31 executing program 3: 14:41:31 executing program 5: 14:41:31 executing program 0: 14:41:31 executing program 2: [ 581.855699][T14977] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:32 executing program 4: [ 582.018612][T14983] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:32 executing program 3: 14:41:32 executing program 5: 14:41:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4e000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:32 executing program 0: 14:41:32 executing program 2: 14:41:32 executing program 4: 14:41:32 executing program 5: 14:41:32 executing program 3: [ 582.657085][T14993] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 582.772851][T14997] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:33 executing program 0: 14:41:33 executing program 2: 14:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5e020000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:33 executing program 3: 14:41:33 executing program 4: 14:41:33 executing program 5: 14:41:33 executing program 0: [ 583.435723][T15007] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:33 executing program 2: [ 583.549886][T15013] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:33 executing program 5: 14:41:33 executing program 3: 14:41:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000100)=""/149, 0x95) 14:41:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000001240)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) 14:41:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [], {0x14}}, 0x28}}, 0x0) [ 584.196310][T15023] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664c3fd64362f39caf17d73cb9618953b893925af523365e54ca6517c5974f4c48e490865e0fab9dd440c15c15593785f57589097e5eec4f7952546b4e69d6ef967736d1", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x25) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 14:41:34 executing program 3: r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 584.316805][T15030] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:34 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 14:41:34 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x18b002, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 14:41:34 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) fcntl$setsig(r0, 0x406, 0x0) [ 584.605778][T15040] ptrace attach of "/root/syz-executor.5"[15039] was attempted by "/root/syz-executor.5"[15040] 14:41:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 14:41:35 executing program 3: r0 = eventfd(0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000000)) eventfd(0xa) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000004c0)="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", 0x14a, r1) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="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", 0x1ae, 0x0) keyctl$link(0x8, r2, r2) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0xfffffffffffffffd, &(0x7f0000000180)) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r3 = semget$private(0x0, 0x4, 0x489) shmctl$SHM_UNLOCK(r3, 0xc) 14:41:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x60c441, 0x0) write(r0, 0x0, 0x0) 14:41:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x5451, 0x0) 14:41:35 executing program 4: 14:41:35 executing program 5: 14:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:35 executing program 3: 14:41:35 executing program 2: 14:41:36 executing program 5: 14:41:36 executing program 0: 14:41:36 executing program 4: 14:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:36 executing program 2: 14:41:36 executing program 3: 14:41:36 executing program 5: 14:41:36 executing program 0: 14:41:36 executing program 4: [ 586.473003][T15088] validate_nla: 4 callbacks suppressed [ 586.473038][T15088] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="5500000018007f2521fe0532a4a280b30a6000050002000005000000390009002d0050000600000019000540029b840200f75a4ff34ec6d1d1b947ca3ab82200007e0cec4fab91d471cd34938c42f030dd941e7931", 0x55}], 0x1}, 0x0) [ 586.595058][T15093] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c20164804013e0200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x1005a, 0x800, 0x0, 0x2f) 14:41:37 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000240)="1c0000005200050f0c1000000001c00000000171f8a27a4c0208755f", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:37 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 14:41:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="1b", 0x1}], 0x2}}], 0x1, 0x0) 14:41:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x2}]}}, &(0x7f00000001c0)=""/149, 0x26, 0x95, 0x1}, 0x20) [ 587.261367][T15109] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 587.369294][T15115] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x19, 0x1, &(0x7f0000000040)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:41:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0xe0c, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x1f, 0x0, 0x9, 0x19, 'syz1\x00', "5ab753812f8f2c149314ff0b9866275d26e25838d9b762ce245531103538c253", "179b261e7b87bb9e3cd84740c6dc4e27765109968f5e7883c6e5a21b6d7ebcdf", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x1}}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "3af069cb0fb2078ef7c5e36de2f0d5d27d850d84dbac65549907596bdcfe36e3", "341c039df0af908b5b3e8a79b157ab58430a8ac954e921ca886501a362f60cd2", [{0x1, 0x5626, {0x2}}, {}, {}, {}, {}, {}, {}, {}, {0x1f, 0xfffe, {0x2}}, {0x5, 0x6, {0x1, 0x5}}, {0x9, 0x4, {0x1, 0x800}}, {0x7, 0xb3d4, {0x2, 0x5}}, {0x6, 0xfff, {0x0, 0x6}}, {0x8, 0x1, {0x3, 0xae}}, {0xea8, 0xfff9, {0x0, 0xffffffff}}, {0x0, 0x0, {0x0, 0x7}}, {}, {}, {0x0, 0x0, {0x0, 0x8}}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x3}}, {0x0, 0x5, {0x1, 0x1}}, {0x1ff, 0x7, {0x0, 0x1ff}}, {0x7, 0x80, {0x2, 0x4}}, {0x130d, 0x8, {0x2, 0x9}}, {0x4, 0x812, {0x0, 0x1000}}, {0x3, 0x96, {0x2, 0x7780}}, {0x977f, 0x6246, {0x0, 0x7f}}, {0x3ff, 0x6, {0x3, 0x3ff}}, {0x0, 0x0, {0x2, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x7, 0x7, 0x9, 0xffe1, 0x20, 'syz1\x00', "d7afeaff28644b9dd7bd6a7f03efbd491f0a491f0d49a2c9bb04c68522c6c733", "9f4e1fe8a1d6914453895e460f6d77d53e672de7071995a7402198ba4d331e77", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, {0x3, 0xbb1b}}, {0xf801, 0xfff}, {0x3f, 0x400, {0x1, 0x1000}}, {0x6, 0xf801, {0x2, 0x2}}, {0x0, 0x6, {0x2, 0x100}}, {0x40, 0x0, {0x1, 0x5}}, {0xe3, 0x401, {0x0, 0x40}}, {0xd4a1, 0x787a, {0x2, 0x7a}}, {0x5, 0x8, {0x1, 0xa7f4}}, {0xfffd, 0x0, {0x3, 0xd7}}, {0x3ff, 0x6, {0x1, 0x8001}}, {0x1, 0xadd, {0x0, 0x81}}, {0x0, 0x0, {0x0, 0x2}}, {}, {}, {}, {0x69ef, 0xff}, {0x0, 0x80, {0x2}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x401}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x80, 0x1, 0x2, 0xd519, 0x19, 'syz1\x00', "470c0b70cddab7d0eff4828288058fe0b980c90c1eb590695f244084583f8db1", "622c4faae99d4cddb7763a5a129f8a044beb74e0bf57ec369124ef382e98545f", [{0x0, 0x0, {0x1}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfac, 0x91, {0x4, 0x4}}, {0xff, 0x9, {0x1}}, {0x5, 0xfd, {0x2, 0x3}}, {0x7f, 0x4, {0x1, 0x7}}, {0x20, 0x1}, {0x45, 0x0, {0x1}}, {0x2, 0x8, {0x0, 0xbc59}}, {0x775, 0x81, {0x1, 0x3ff}}, {0x4, 0x9, {0x0, 0x7fff}}, {0x9, 0x7, {0x3, 0x100}}, {0xffff, 0x7f, {0x0, 0x400}}, {0x1, 0x0, {0x2, 0xfff}}, {0x2, 0x4, {0x0, 0x7}}, {0xff, 0x101, {0x0, 0x9}}, {0x6, 0x6, {0x1, 0x5e}}, {0x9, 0x94, {0x3, 0x1}}, {0x75, 0x6, {0x0, 0x1}}, {0x9, 0x1000, {0x2, 0x1000}}, {0x32, 0x78f, {0x3, 0x101}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "7970d2bf417e946c214aa7964afd4db7fd448f04b06cbd750ea27b9a377e80e9", "5a63b99662612a8a27fca33fcd8822a4dad9245339fd07c401e6f989f891f9c7", [{0x0, 0x5, {0x3, 0x9}}, {0xfff, 0x0, {0x1, 0x100}}, {0x0, 0x9, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "a14e910f94ba0cbdabfe442576724d4285874ed9563e13cb43c90f996eec4631", "a147fad3d0d8aa879dd9e321dc9640f7b4ab3938bd0efeae723f53830c529de6", [{}, {}, {0x0, 0x0, {0x0, 0x3f}}, {0x685d, 0x3, {0x5fee23bd579fd085, 0x2}}, {0x401}, {0x0, 0x40, {0x2, 0x5}}, {0x20, 0xbf, {0x3, 0x5}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x8001}, {0x200, 0x8, {0x3, 0x6}}, {0xc00, 0x0, {0x1, 0xdb8}}, {0x1f, 0x9, {0x0, 0x7fffffff}}, {0x868, 0x40, {0x1}}, {0x0, 0x8c, {0x3, 0x8001}}, {0xff, 0x7096, {0x2, 0x6}}, {0xffff, 0x800, {0x2, 0x6}}]}}}]}, 0xe0c}}, 0x0) 14:41:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 14:41:37 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000001c0)=""/149, 0x26, 0x95, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=""/208, 0xd0}}, 0x10) 14:41:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x3, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 14:41:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) [ 588.028206][T15133] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:38 executing program 0: [ 588.161159][T15138] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:38 executing program 3: 14:41:38 executing program 4: 14:41:38 executing program 2: 14:41:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:38 executing program 5: 14:41:38 executing program 0: 14:41:38 executing program 3: [ 588.814801][T15150] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:39 executing program 4: 14:41:39 executing program 2: [ 588.954289][T15154] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:39 executing program 5: 14:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81ffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:39 executing program 0: 14:41:39 executing program 3: 14:41:39 executing program 4: 14:41:39 executing program 2: [ 589.609328][T15164] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 589.731088][T15169] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:39 executing program 5: 14:41:39 executing program 0: 14:41:40 executing program 4: 14:41:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88470000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:40 executing program 3: 14:41:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4040050) 14:41:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet(r0, 0x0, &(0x7f00000000c0)) 14:41:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x5450, 0x0) 14:41:40 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8901, &(0x7f00000000c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'nr0\x00'}) 14:41:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88480000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 14:41:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x5450, 0x0) 14:41:40 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002300)) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:41:41 executing program 2: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x1018c1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:41:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) r2 = gettid() openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 14:41:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8850) 14:41:41 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x60042, 0x0) write$apparmor_current(r0, 0x0, 0x0) 14:41:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000073c0)={0x0, 0x0, &(0x7f0000007380)={0x0}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = gettid() tkill(r5, 0x1000000000016) 14:41:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:41 executing program 2: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00') rmdir(&(0x7f0000000200)='./file0/file1\x00') 14:41:41 executing program 4: prctl$PR_MPX_DISABLE_MANAGEMENT(0x23) [ 591.816230][T15227] validate_nla: 4 callbacks suppressed [ 591.816265][T15227] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:42 executing program 5: r0 = socket(0xa, 0x3, 0x1) sendmmsg$unix(r0, &(0x7f0000002c80)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 14:41:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r0, r1) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 14:41:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) [ 592.044762][T15235] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xffffffffffffffe8}}, 0x0) 14:41:42 executing program 4: setrlimit(0x7, &(0x7f0000000080)) sched_setscheduler(0x0, 0x5, &(0x7f0000001c00)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:41:42 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) 14:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x919faaa0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5452, &(0x7f0000001100)={{}, "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"}) 14:41:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') dup2(r0, r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 592.797868][T15258] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 592.911810][T15265] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:43 executing program 3: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 14:41:43 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x111040, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 14:41:43 executing program 5: r0 = socket(0x100000000011, 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xae, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}}, 0x0) 14:41:44 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 14:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x8980, 0x0) 14:41:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:41:44 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x5450, 0x0) 14:41:44 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 594.103779][T15291] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_pts(r0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)) 14:41:44 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$KDDELIO(r0, 0x541b, 0x20400000) 14:41:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) memfd_create(&(0x7f0000000100)='%#user-nodevkey\ting+[\x00\x91)\xc8\x19NU\xd1|X\xb0O\xb7\xc3\xc8\x9e>~\x9a\xfe\xee\xd9\x17\xdc\xa5\xa3\xa7{A\xb1\x8a\x9c\x03\r\xaf\x96{H\xb2\xff\xfa\x1b\xfe@|\x13\x9f\x13\xd52om\x1ej\xad\xa4\xa0\x176\xa6\x17-\x17\v\xa3\x7f\x9e S\r\x8a1\xce\v\xd8\x12m\xc2\xab\xa8;{Y\x02\xf2\xbf\xba\x06\xffO\x97\xa1\r_$\xbf\xd9\x8a\x17\x1c\x9f\x8a\xe8\xa5_$@3\x0e1y\a\xd6`\xb3_\x14\xc3p\xd6T\x0e\x91\x1a\x16\xc9s\xf8\xb8C\xb3ugg\xb7N\xce\xffq\xd7\xe2vN#\t\x00\x00\x00\xfbL\xad\xbb\x95\xda\xbb\x02\xf4\xd0\xd2\xe2\xd4\xe4\b\xdc\xd6\x17\x0f\xce\xe1Oh\x83\x03\x00\x00\x00\x9e\xcba\x8c\x92W\x1a\b`\xd8\xf0\xd4\xb5\t\x11\xf9^\x96Fd2\x8cC%\x0e\x8a\xa2\x9c>\xf2', 0x0) fdatasync(r0) 14:41:45 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) tkill(r0, 0x1000000000016) [ 595.133444][T15303] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa0030000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:45 executing program 0: r0 = eventfd(0x0) write$tun(r0, &(0x7f0000001240)={@val, @val, @ipv4}, 0x2a) 14:41:45 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5421, &(0x7f0000000040)={0x2, @generic={0x0, "c68dde4f49f73fe9c9b49238dd18"}, @ipx={0x4, 0x0, 0x0, "ab75c86007c6"}, @generic={0x0, "a0a8d2965085db94537717e32b70"}}) 14:41:45 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 595.659255][T15319] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 595.768569][T15327] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x5425, 0x0) 14:41:46 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7f) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) 14:41:46 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa0aa9f91, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:46 executing program 3: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 14:41:46 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 596.387666][T15344] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 596.491425][T15350] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:46 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 14:41:46 executing program 0: r0 = eventfd(0x0) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000040)=""/126) 14:41:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010811, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="05"], 0x14}}, 0x0) tkill(r2, 0x1000000000016) 14:41:46 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TIOCGWINSZ(r2, 0x5413, 0x0) 14:41:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc3ffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:47 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 14:41:47 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) 14:41:47 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) dup2(r0, r1) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 597.163963][T15370] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 597.327487][T15380] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 14:41:47 executing program 5: prctl$PR_GET_THP_DISABLE(0x26) 14:41:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x6c1) r2 = dup(r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 14:41:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xccd20200, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGABS0(r0, 0x5450, 0x0) 14:41:48 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000d00), 0x4) 14:41:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 598.152407][T15406] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 598.222879][T15403] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004000) 14:41:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) epoll_pwait(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xefffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:49 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r0, 0x1000000000015) 14:41:49 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000600)) [ 598.910806][T15427] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 599.075288][T15430] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x1a3, 0x0, 0x0, 0x0, 0xfffffffffffffe67}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70c}, 0x1c}}, 0x0) close(r1) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000100), 0x4) 14:41:49 executing program 5: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) futimesat(r0, 0x0, 0x0) 14:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0xc, 0x0, &(0x7f0000000100)) 14:41:49 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGPTPEER(r0, 0x540d, 0x0) [ 599.810316][T15450] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 599.903573][T15454] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:50 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, 0x0) 14:41:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 14:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfcffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 14:41:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) dup3(r1, r2, 0x0) ioctl$CHAR_RAW_GETSIZE(r2, 0x1260, &(0x7f0000000080)) 14:41:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r4, r3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) dup3(r3, r0, 0x0) tkill(r1, 0x1000000000016) 14:41:50 executing program 5: r0 = epoll_create(0x40000acf) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 600.693212][T15476] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 600.857880][T15486] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:51 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) 14:41:51 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) 14:41:51 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200000841, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) 14:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfeff0000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:51 executing program 5: r0 = eventfd(0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x5452, &(0x7f0000000040)) 14:41:51 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:41:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 14:41:51 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, 0x0) 14:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff0f0000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:41:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:52 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) [ 602.271771][T15525] validate_nla: 2 callbacks suppressed [ 602.271806][T15525] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x3d6, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) [ 602.339061][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 602.382398][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 602.428189][T15530] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xff7f0000, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 602.730434][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 602.792620][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:41:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) write(r1, 0x0, 0x0) [ 602.871618][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 603.066027][T15546] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 603.162865][T15550] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:41:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10041, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002040)={0x0, 0x1, 0x6}, 0x10) 14:41:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) 14:41:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x5421, &(0x7f0000001cc0)={0x2, @ethernet={0x0, @random="42358dc56816"}, @ethernet={0x0, @broadcast}, @tipc}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/228) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000000)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 14:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffff0f00, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r1, 0x0, 0x0) [ 603.502902][T15556] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 603.619620][T15565] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) write(r1, 0x0, 0x0) [ 603.706265][T15570] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) setsockopt$inet_buf(r1, 0x0, 0x24, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 14:41:54 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 14:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:54 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) [ 604.335167][T15585] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) write(r1, 0x0, 0x0) 14:41:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 14:41:55 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x5450, 0x0) 14:41:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) write(r1, 0x0, 0x0) 14:41:58 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) 14:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:41:58 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCSABS3F(r0, 0x5421, &(0x7f0000000000)) 14:41:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 14:41:58 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f00000000c0)) [ 608.386370][T15626] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000040), 0x10) write$P9_RLERROR(r0, 0x0, 0x0) [ 608.490787][T15634] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:58 executing program 4: r0 = socket(0x2, 0x2, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 14:41:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 14:41:58 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001d00)=0x2, 0x4) 14:41:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 14:41:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff81, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:41:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 14:41:59 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x5450, 0x0) 14:41:59 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) 14:41:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_RUNLINKAT(r0, 0x0, 0x0) [ 609.312227][T15655] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) dup2(r0, r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x0) [ 609.542840][T15662] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:41:59 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 14:41:59 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:00 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:42:00 executing program 2: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r0, 0x5421, &(0x7f00000000c0)) 14:42:00 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:42:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) dup3(r0, r2, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) [ 610.237283][T15686] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r0, 0x0, 0x0) [ 610.353145][T15690] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 610.418329][ T8719] Bluetooth: hci5: command 0x0406 tx timeout 14:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) dup3(r0, r1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) 14:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffc3, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:01 executing program 0: pipe2$9p(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010002, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket(0xa, 0x2, 0x0) tkill(r1, 0x1000000000016) 14:42:01 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:01 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 611.111789][T15711] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 611.187722][T15719] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffef, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000) 14:42:01 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000440)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:01 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:01 executing program 2: r0 = socket(0xa, 0x801, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) [ 611.823081][T15737] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 611.973721][T15748] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:02 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:42:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') close(r0) r1 = socket$inet6(0xa, 0x3, 0x4000009) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$eventfd(r2, 0x0, 0x0) 14:42:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:02 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) 14:42:02 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:02 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) 14:42:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) 14:42:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, &(0x7f0000000080)) 14:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffc, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8911, 0x0) 14:42:03 executing program 0: r0 = epoll_create(0x8403) ioctl$BLKTRACESTOP(r0, 0x5450, 0x0) [ 613.452475][T15800] validate_nla: 3 callbacks suppressed [ 613.452510][T15800] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x400000000002}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) 14:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x9, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:04 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) 14:42:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) tkill(r2, 0x7) 14:42:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:04 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xe8d, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$inet6(r0, 0x0, &(0x7f0000004100)) 14:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x10, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/45) 14:42:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x20000000) 14:42:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, 0x0, 0x0) 14:42:04 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3b, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) write(r0, 0x0, 0x0) [ 615.368784][T15849] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 14:42:05 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x5450, r1) [ 615.548632][T15856] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. 14:42:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x40040) 14:42:08 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sched_getattr(r1, &(0x7f0000000180)={0x38}, 0x38, 0x0) 14:42:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 14:42:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0xc0, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x3e, 0x0, 0x0) 14:42:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000001b80)={0x2, 0x4e23, @empty}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r2 = dup2(r0, r1) r3 = dup(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) 14:42:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5451, 0x0) 14:42:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x6c0, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 14:42:08 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r0, &(0x7f0000000100)=0x20000000000080, 0x8) sendfile(r0, r0, &(0x7f00000000c0), 0x2000000000feff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x29, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) 14:42:08 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003000000c817fbf192c9b52200000107080000000000000000000000000000000000000000000000004e3fa56eed6dbfc55d3d3555050fc60ed628918ad8e16d0215e057df1d5cfdac28de61681efcbcae8acad54adea0668447720c16d294d6a166cd676d132ffb45c053abd979d47218bb438259a91d320560ec36de1928f4a8e231b4b27bbf4c8a5bb629c96aa38af80f57f573f5b4cf62b9f1c953891d0fde67ba4e9d18c4709b9960b8e87d1602714bdc2733d5690e6eed09c96eb4e4cd7a2f7d250c58828b9e2ba322510a9794411584206b4707672b3eceb145"], 0x28) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) dup2(r1, r0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:42:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 14:42:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 14:42:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0xec1, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4800) 14:42:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000fffe, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x4) tkill(r2, 0x1000000000015) 14:42:09 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 14:42:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 14:42:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FITHAW(r0, 0x5450) 14:42:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x33fe0, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:10 executing program 5: r0 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 14:42:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x20008080) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:42:10 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 14:42:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_int(r1, 0x29, 0x12, 0x0, &(0x7f0000000080)) 14:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x200002fc, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 14:42:10 executing program 5: r0 = epoll_create1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 14:42:10 executing program 4: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) open(&(0x7f00009b7000)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0) 14:42:10 executing program 0: socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:42:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r0, r1) ioctl$BLKTRACETEARDOWN(r2, 0x127a, 0xc07300) 14:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x7ffff000, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r7 = dup3(r6, r0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, 0x0) 14:42:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 14:42:11 executing program 0: futex(0x0, 0x81, 0x0, 0x0, &(0x7f0000000580), 0x0) 14:42:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, 0x0, 0x0) 14:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0xfffffdef, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:11 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(r1, r0, 0x0) read$char_raw(r0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 14:42:12 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 14:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x2, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) close(r1) getsockopt$sock_buf(r1, 0x1, 0x22, 0x0, &(0x7f00000000c0)) r2 = dup(r1) getdents64(r2, &(0x7f0000000080)=""/30, 0x1e) r3 = dup(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tkill(r4, 0x20) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) r5 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(0xffffffffffffffff, r5) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={[], 0xe9d, 0x1, 0x81, 0x80, 0x800, r4}) r6 = semget$private(0x0, 0x4, 0xf40) semctl$GETNCNT(r6, 0x1, 0xe, &(0x7f0000000100)=""/141) shmat(r6, &(0x7f0000ffb000/0x3000)=nil, 0x4000) semctl$SETVAL(r6, 0x1, 0x10, &(0x7f00000001c0)=0xe794) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 14:42:12 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80000) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$FICLONE(r0, 0x40049409, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) dup2(r4, r3) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000380)=""/217) fstat(r2, &(0x7f0000000240)) timerfd_create(0x3, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x540d, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) dup2(r6, r5) ioctl$CHAR_RAW_ALIGNOFF(r5, 0x127a, &(0x7f0000000300)) 14:42:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40008c0) 14:42:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) dup2(r1, r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:42:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 14:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x3, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0xb, 0x0, &(0x7f0000000000)) 14:42:16 executing program 2: r0 = socket(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x14}}}, 0x30}}, 0x0) socket$inet6(0xa, 0x0, 0x0) tkill(r2, 0x1000000000016) 14:42:16 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000200)=""/107) 14:42:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:42:16 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 14:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x4, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) tkill(r1, 0x1000000000016) 14:42:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004041) 14:42:17 executing program 4: r0 = socket(0x11, 0xa, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 14:42:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x5452, &(0x7f0000000140)) 14:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x5, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) ioctl$PIO_CMAP(r1, 0x541b, &(0x7f0000000040)) 14:42:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7}, 0x7) r2 = accept$inet(r0, 0x0, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 14:42:17 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 627.787553][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 627.846841][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:42:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, 0x0) 14:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x6, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:42:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$unix(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000001580), 0x4) 14:42:18 executing program 3: r0 = socket$nl_generic(0x2, 0x2, 0x88) r1 = dup2(r0, r0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x16, 0x0, &(0x7f0000000080)) 14:42:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:42:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000b80)=0x80) ioctl$LOOP_GET_STATUS(r1, 0x5452, &(0x7f0000000000)) 14:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x7, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:19 executing program 3: prctl$PR_SET_TIMERSLACK(0x23, 0x0) 14:42:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r0, r1) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f00000006c0)) 14:42:19 executing program 2: 14:42:19 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 14:42:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:42:19 executing program 3: r0 = gettid() r1 = socket$inet(0x2, 0x3, 0x8) fcntl$setown(r1, 0x8, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000bc0)=0x0) rt_sigqueueinfo(r2, 0x0, &(0x7f0000001900)) 14:42:19 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x541b, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 14:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x8, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:20 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 14:42:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000b80)=0x80) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)) 14:42:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 14:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x9, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCRMFF(r1, 0x8906, 0x0) 14:42:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$unix(0x1, 0x200000000001, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x3, 0x0, 0x7a) 14:42:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup3(r0, r1, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 14:42:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r1, 0x1000000000016) 14:42:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x5450, r2) 14:42:21 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0xa, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:21 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 14:42:21 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:21 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r1 = dup(r0) ioctl$NS_GET_OWNER_UID(r1, 0x5460, &(0x7f0000000080)=0x0) setuid(r2) 14:42:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) 14:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0xb, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000080)) 14:42:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0, 0x7c}}, 0x20000040) 14:42:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001400), 0x8) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 14:42:21 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCSABS2F(r2, 0x5451, 0x0) 14:42:22 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0x5450, 0x0) 14:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0xc, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 14:42:22 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) getpeername$netlink(r0, 0x0, &(0x7f00000004c0)) 14:42:22 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) 14:42:22 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 14:42:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x1) 14:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0xd, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) 14:42:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 14:42:23 executing program 3: r0 = socket(0x2, 0x3, 0x1000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:42:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_BALANCE(r0, 0x5450, 0x0) 14:42:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0xe, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8901, &(0x7f0000000080)) 14:42:23 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 14:42:23 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$CHAR_RAW_ROGET(r1, 0x125e, &(0x7f0000000040)) 14:42:24 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 14:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0xf, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:24 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "0000de4400000043f3bc54f47a36e400"}) 14:42:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) 14:42:24 executing program 2: r0 = socket(0xa, 0x3, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:24 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x890b, &(0x7f00000010c0)) 14:42:24 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 14:42:24 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x11, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x0) 14:42:25 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0x0) [ 634.992674][T16276] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 635.050656][T16278] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:25 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) getpeername(r0, 0x0, &(0x7f0000003680)) 14:42:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0, 0x7ec}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 14:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) dup2(r0, r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 14:42:25 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r0, r1) write$9p(r1, &(0x7f0000000100)="7c4496818bfcb6da", 0x8) 14:42:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc0) 14:42:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = dup2(r1, r1) symlinkat(&(0x7f0000000000)='./file0/file0\x00', r2, &(0x7f0000000040)='./file0\x00') renameat2(r0, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file1\x00', 0x1) [ 635.717853][T16295] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 635.726405][T16295] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 635.854467][T16302] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 635.863236][T16302] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:26 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r0, 0x1000000000016) 14:42:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0xc, 0x0, 0x0) 14:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x13, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x6c1) r2 = dup(r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:42:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 636.457945][T16317] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 636.573908][T16323] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:26 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) 14:42:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 14:42:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 14:42:27 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xab, &(0x7f0000000080)={0x0}}, 0x0) 14:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x1b, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:27 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:42:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x15, 0x0, &(0x7f00000000c0)) 14:42:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 14:42:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup2(r0, r1) syz_open_pts(r1, 0x0) 14:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x22, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:27 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x0) 14:42:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x6, 0x4) 14:42:28 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000011c0)={0x0, 0x1, [], [@ra, @jumbo, @generic={0x0, 0x0, "f7cd27422775553331011d2241e46f999cfa7c2ce17d5c4fc4882765e597c7a08d7356a4836d427a36ad8cd695386be37406f994fe94c1dab65e9228b8a909539bc7f3bb0f8862e9345defe4046a74272d2e108d6794cb7bcec7136b3ac2705ff9a4"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x0) 14:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x29, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0x18, 0x0, 0xc45e35b843f23d8f) 14:42:28 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}}, 0x0) 14:42:29 executing program 4: r0 = memfd_create(&(0x7f0000000240)='-B\xd5NI\xc5\xac\xdb\xb9\xdb\xd1\xa7\xb1S\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf]\xcbE\x00#\xcf)\x0f\xc8\xc0:\x9cc\x10\xa4\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddzg\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9&\xcdJx\xaa\x8f~\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00}\t\xe8\xbfu\xc9\xeeg\xa2z\xf0\xf1\x00\xfc\xd4\xfb\x00=\xce\xe7>\x12\xf2\xe8\x1c\x11G\xdcpA\xbe\xb6?\xb61Kd\xf0\xb6\x963(nB\xc5\xb3\x9e\\\x15\xb1J\xffFQ~\xc0\x00\x8d\x8d\x93\xec@\xa8\xd5\xa3\xf9\xfe`@\xac\x01\xe4\x03\xb5H\x9ay\xe4\x89\xb9\xd8.\xf8\x8eV\xe3w\x97pn\x9b\x93\xc1\xfa\xa7I\xf7\n>\xd9e\xc7\xf5\xf4\xb3\xec6\fn\xfb&\xeb&h\xa7T\xd7J\x8d\xa2a\x92T#\x9d\x06\xd3\x11\xfa\xaa&\t\xa71\x02\xed\xfc\x7f\\S^\b\x93g\xcb\xe9\x0eb,\xc3\x91\xdb/w\xa36\xd7\x8d\x1c\x0e\x84\x8c-\xb1\xc2\xa1XB\x8d.\xf1\xdb\n\xbcj\x92z~\xc7\x04e\xa0v?\xa9*\xa0\x8ch\x05\x1e\'\xcd\xddN\x8el\xdd\xd5\xb6\xf9~\x8f\x8f,\xdd\x96U\x82\xb3{*\xacfH:\x9e\x91\x86i\xd8\xfd\x91\x15P\x13y\xea\xceC<\xaac\x1dDH\xab\x02\x1e\x96\t\xf7\xc5e@\xc4{3\xda)\x18!\xce\x00'/345, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) sendfile(r0, r0, &(0x7f0000000080), 0x21c) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 14:42:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="88012abd7000fddbdf2516000000540009800800020007000000080001003f00000008000200010000000800010009000000080001008000000008000200000000000800021d00000000000000000600000008000200f9ffffff0800010002000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x400c1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r3, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) semctl$SETVAL(r4, 0x0, 0x10, 0x0) r5 = shmat(r4, &(0x7f0000fef000/0xe000)=nil, 0x0) shmdt(r5) write$binfmt_misc(r3, 0x0, 0x0) socketpair$unix(0x1, 0x200000004, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000740)=""/122, 0x7a}], 0x5, &(0x7f0000000600)=""/197, 0xc5}, 0xc}], 0x1, 0x40, 0x0) 14:42:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 14:42:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) write$P9_RRENAMEAT(r0, 0x0, 0x0) 14:42:29 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$EVIOCGMASK(r0, 0x2, &(0x7f0000000600)={0x0, 0xffffffffffffff5d, 0x0}) 14:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x37, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:42:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffa3}}, 0x0) 14:42:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup(r0) ioctl$CHAR_RAW_PBSZGET(r1, 0x127b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 14:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x64, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x6c1) r2 = dup(r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 14:42:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 14:42:31 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5421, &(0x7f0000001840)) 14:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x73, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) write$P9_RVERSION(r0, 0x0, 0x0) 14:42:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x2aa, 0x2040, 0x0, 0xfeb8) 14:42:31 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:31 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) 14:42:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 14:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x7c3, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "9cc48d7b065b901dcbc47dbb8a93efcab32291e00f120020070cc8994d98d94e"}) 14:42:32 executing program 0: r0 = socket(0xa, 0x3, 0x8) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000580)) 14:42:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5450, 0x0) 14:42:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:42:32 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 14:42:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x7c5, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:33 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) write$P9_RRENAME(r1, 0x0, 0x0) 14:42:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 14:42:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 14:42:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() write$P9_RCLUNK(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 14:42:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e21, @empty}, 0x80) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 14:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x702, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:33 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:42:34 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 14:42:34 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLINK(r0, &(0x7f0000000040)={0x2}, 0xffffff07) write$P9_RSETATTR(r0, &(0x7f0000000100)={0x7}, 0x7) 14:42:34 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x5450, 0x0) 14:42:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x703, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:34 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) [ 644.471367][T16514] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={0x0, 0x368, &(0x7f0000000040)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 644.598468][T16521] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x5451, 0x0) 14:42:34 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0}}, 0x4) 14:42:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @local}}) 14:42:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) 14:42:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x704, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:36 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:42:36 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x706, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:36 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000002540)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 14:42:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x40102, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 14:42:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:36 executing program 0: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) 14:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet6_buf(r0, 0x29, 0x3b, 0x0, &(0x7f0000000000)) 14:42:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0xfdb2, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r2, 0x1000000000016) [ 646.986886][T16566] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 647.150847][T16572] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x32, 0x400000, 0x4) 14:42:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_MIGRATE(r0, 0x5450) 14:42:37 executing program 3: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup3(r0, r2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9ca}, 0x1c) write$vga_arbiter(r3, 0x0, 0x0) 14:42:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x0) 14:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x708, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000500)) r2 = dup2(r0, r0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) tkill(r1, 0x1000000000016) 14:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x709, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003300)=[{{&(0x7f0000000740)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x8000) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005140)='/proc/thread-self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 14:42:38 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x5450, 0x0) 14:42:38 executing program 5: msgget(0x2, 0x234) [ 648.645789][T16604] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 648.766268][T16611] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:39 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x80001, 0x0) write$eventfd(r0, 0x0, 0x0) 14:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x70a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket(0x2, 0xa, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00d9c8000000000000020000070000000800060009000000080005000000000008000500fc04fd54010f6e716e0002006970766c616e31000000000000000000060007004e24"], 0x4c}}, 0x0) tkill(r2, 0x1000000000016) 14:42:39 executing program 5: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:42:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)) 14:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x70b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) getsockname(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x29, 0x46, 0x0, 0x27a) 14:42:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) setsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_to_bond\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 652.072274][T16647] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:42 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040), 0x0, 0x40000060, 0x0, 0xfdee) [ 652.194395][T16654] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:42 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) 14:42:42 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r0, r1) lseek(r2, 0x0, 0x0) 14:42:42 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x70c, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000080)) 14:42:43 executing program 3: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c1d000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0) 14:42:43 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200), 0x4) 14:42:43 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x10000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r2, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) 14:42:43 executing program 2: r0 = socket(0x10, 0x2, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000080)) 14:42:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 14:42:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:42:43 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) [ 653.916892][T16703] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:44 executing program 2: setxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) [ 654.057883][T16711] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:44 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) 14:42:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000380), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x20000002) 14:42:44 executing program 5: mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r0, r1) connect$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:42:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x70f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:44 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x5452, &(0x7f00000001c0)) 14:42:44 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5450, 0x0) 14:42:45 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "007e8dd489469f20c7f27dbb8a93ef4e0000d4664a04000000b200"}) [ 654.917157][T16733] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x5427, 0x0) [ 655.126344][T16737] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:45 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000002440)={&(0x7f0000000100)={0xa, 0x4}, 0x2000010c, &(0x7f0000002400)={0x0}}, 0x0) 14:42:45 executing program 2: r0 = epoll_create(0x8003) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x710, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:42:45 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:42:45 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5451, 0x0) 14:42:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x29, 0x22, 0x0, 0xfea3) 14:42:46 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd8cc1, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 14:42:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x711, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)) 14:42:46 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 14:42:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 14:42:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x4b66, &(0x7f0000000000)) 14:42:46 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 656.543098][T16773] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 656.692266][T16784] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:47 executing program 5: r0 = memfd_create(&(0x7f0000000180)='/dev/ptmx\x00', 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) 14:42:47 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8953, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:42:47 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x480c2, 0x0) 14:42:47 executing program 4: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:42:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000009c0)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 14:42:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x712, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:47 executing program 3: r0 = memfd_create(&(0x7f0000000180)='selinuxselinux@$vmnet1--user&,eth1\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 14:42:47 executing program 4: r0 = inotify_init() close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8903, &(0x7f0000000000)) 14:42:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x29, 0x42, 0x0, 0x52) 14:42:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x713, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 658.004275][T16816] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:48 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl(r0, 0x0, 0x0) 14:42:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) connect$netlink(r1, &(0x7f0000000280)=@unspec, 0x6) sendto$unix(r0, 0x0, 0xfffffffffffffe03, 0x0, 0x0, 0xffffffffffffff2f) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0xc101) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 658.160567][T16823] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(r2, 0x1000000000016) 14:42:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x5460, &(0x7f0000000040)) 14:42:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x714, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5424, &(0x7f00000000c0)) 14:42:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) r3 = dup2(r2, r0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x4, 0x0, 0x0) 14:42:50 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:42:50 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x5450, 0x0) 14:42:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40) 14:42:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) 14:42:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = dup(r2) setsockopt$inet6_tcp_buf(r3, 0x6, 0x19, &(0x7f0000000000)="0b15a29d", 0x4) 14:42:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x715, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="0001000000000000c2"], 0x18) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) dup3(r2, r0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 661.247208][T16876] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = dup2(r0, r0) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) [ 661.388972][T16879] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000600)) 14:42:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000440), 0x4) 14:42:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) fcntl$setlease(r0, 0x406, 0x0) 14:42:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x716, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000000)={0x0, 0xfffffc2d, &(0x7f0000000140)={0x0, 0x51}}, 0x0) 14:42:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:52 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000080)) 14:42:52 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000780)={&(0x7f0000000080), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 14:42:52 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r1, r0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000240)={0x0, 0x0, 0x0}) 14:42:52 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) 14:42:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) write$P9_RSETATTR(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 14:42:52 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:42:52 executing program 5: r0 = socket(0xa, 0x3, 0x40) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0}}, 0x0) 14:42:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x71d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 662.858494][T16917] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 662.901963][T16923] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RRENAME(r1, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) write$P9_RLERRORu(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 14:42:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40090) 14:42:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x15, 0x0, &(0x7f0000000000)) [ 663.368713][T16942] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 663.429187][T16942] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:54 executing program 4: r0 = inotify_init1(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 14:42:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) [ 664.486355][T16969] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 664.603518][T16973] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0xf, &(0x7f00000002c0)) 14:42:55 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x5c}}, 0x0) 14:42:55 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5451) 14:42:55 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_procs(r0, &(0x7f0000000000), 0x2, 0x0) 14:42:55 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b40, 0x0) 14:42:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 665.136840][T16983] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 665.253770][T16993] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, 0x0, 0x0) 14:42:55 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:42:55 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) 14:42:55 executing program 4: 14:42:55 executing program 2: 14:42:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 665.936470][T17010] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:56 executing program 5: 14:42:56 executing program 4: [ 666.013046][T17014] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 14:42:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00B\b'], 0x14}}, 0x0) tkill(r2, 0x1000000000016) 14:42:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x5450, 0x0) 14:42:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 666.548869][T17025] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 666.626235][T17035] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 14:42:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:57 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5450, 0x0) 14:42:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = dup2(r1, r0) write$P9_RMKNOD(r4, 0x0, 0x0) 14:42:57 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x2) 14:42:57 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000c80)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f0000002700)={0x0, ""/77}, 0x55, 0x3, 0x1800) 14:42:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) dup2(r0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x5452, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @dev}}) 14:42:57 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r2 = memfd_create(&(0x7f0000000180)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x1bG\x8c$\xee#9\xda\xf7\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x1c\x90\xd2w\xb6\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7i*\x87\xb8W\xd3\xa4', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) 14:42:57 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:42:57 executing program 0: r0 = epoll_create(0x400) close(r0) pipe2$9p(&(0x7f0000000540), 0x0) fcntl$setpipe(r0, 0x407, 0x0) 14:42:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:57 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, &(0x7f0000000680)) 14:42:58 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 14:42:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, &(0x7f00000000c0)) 14:42:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:42:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:58 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2000080400000000, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000080)) 14:42:58 executing program 5: r0 = socket(0x11, 0x2, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) [ 668.609382][T17093] validate_nla: 4 callbacks suppressed [ 668.609416][T17093] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 668.717507][T17102] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:59 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:42:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) close(r2) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) 14:42:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$KDSETLED(r1, 0x4b32, 0x0) 14:42:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) connect$inet(r2, &(0x7f0000000000), 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) shutdown(r2, 0x0) 14:42:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x9, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:42:59 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 669.360256][T17117] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:59 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) [ 669.496296][T17124] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:42:59 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) write$P9_RLOCK(r0, 0x0, 0x0) 14:43:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) 14:43:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x12, 0x0, &(0x7f0000000780)) 14:43:00 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$CHAR_RAW_ZEROOUT(r1, 0x127f, 0x0) [ 670.267983][T17146] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 670.380263][T17151] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) close(r1) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) 14:43:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xb, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 671.047833][T17165] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 671.158549][T17170] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:03 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r2, r3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 14:43:03 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 14:43:03 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$CHAR_RAW_ZEROOUT(r1, 0x127f, 0x0) 14:43:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:43:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) 14:43:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 673.702144][T17186] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x44000) [ 673.869053][T17191] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) 14:43:04 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 14:43:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) write$P9_RAUTH(r0, 0x0, 0xfffffdc4) 14:43:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xd, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:04 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x80041, 0x0) ioctl$KDSETMODE(r0, 0x5452, 0x2071dfff) 14:43:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r2, r0) accept(r0, 0x0, 0x0) 14:43:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r4, r3) tkill(r2, 0x1000000000016) 14:43:04 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = dup(r0) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 674.701534][T17210] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 674.824843][T17215] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x540b) 14:43:07 executing program 5: semget(0x3, 0x2, 0x251) 14:43:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:07 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:43:07 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43}, 0x43) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:43:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:43:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) close(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) lseek(r1, 0x0, 0x0) [ 677.959020][T17251] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 678.054564][T17259] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a040, 0xb7) 14:43:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5450, 0x0) 14:43:08 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 14:43:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x8000) 14:43:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xf, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:08 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_freezer_state(r0, 0x0, 0x0) 14:43:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 678.732152][T17276] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000140)={0x0}}, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 14:43:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 678.919566][T17280] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:09 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept(r0, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 14:43:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:43:09 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540c, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) 14:43:09 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) [ 679.633597][T17302] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) [ 679.774122][T17308] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5451, 0x0) 14:43:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x11, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 14:43:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8050) 14:43:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={0x0}}, 0x0) 14:43:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80800) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 680.536431][T17331] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xffffffe8) r1 = dup(r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$CHAR_RAW_RAGET(r1, 0x1263, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) [ 680.698666][T17339] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:10 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x20000000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept$inet6(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x48) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:43:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r2, 0x1000000000016) 14:43:11 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 14:43:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x12, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:11 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCGSERIAL(r0, 0x5409, 0x0) 14:43:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) [ 681.489649][T17362] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 681.571623][T17366] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:11 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x13, &(0x7f00000000c0)={0x0}}, 0x0) 14:43:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$unix(0x1, 0x1, 0x0) dup2(r0, r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:43:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:12 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 14:43:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x5451, 0x0) [ 682.209622][T17382] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 682.428336][T17387] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:15 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000dc0)) 14:43:15 executing program 4: r0 = creat(&(0x7f0000001440)='./file0\x00', 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 14:43:15 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 14:43:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2f, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:15 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:43:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr\x00') openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) [ 685.414624][T17410] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 685.560453][T17415] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:43:15 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) pipe(&(0x7f00000014c0)) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000018c0)) 14:43:15 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/11, 0x232) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = dup2(r1, r0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x1000000000015) 14:43:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x0) dup2(r0, r1) setsockopt$inet_buf(r1, 0x0, 0x1, 0x0, 0x0) 14:43:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xc, 0x0, 0x0) 14:43:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x32, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101006) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 14:43:16 executing program 5: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x15, 0x0, &(0x7f0000000000)) 14:43:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) dup2(r0, r1) read$char_usb(r1, 0x0, 0x0) 14:43:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@mss], 0x8d) [ 686.445807][T17436] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:16 executing program 0: r0 = open(&(0x7f00000009c0)='./file0\x00', 0x40440, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f00000003c0)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 686.569294][T17439] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3a, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:17 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$EVIOCSABS20(r0, 0x5451, 0x0) 14:43:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x8906, 0x0) 14:43:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$cgroup_devices(r2, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) [ 687.193567][T17460] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:17 executing program 4: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 14:43:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x143000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x100) [ 687.344923][T17466] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:43:17 executing program 3: r0 = eventfd(0x0) write$binfmt_elf32(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="7f454c46000000ed"], 0x8) write(r0, &(0x7f0000000000)="abbefe935e3d03ef", 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = dup(r2) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 14:43:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:17 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x3e) dup2(r1, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)) 14:43:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x2, &(0x7f0000000400)={0x0, @generic={0x0, "371c738f59d3aaca6f364f4f5e7a"}, @xdp, @xdp}) 14:43:18 executing program 4: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) ioctl$BTRFS_IOC_RESIZE(r0, 0x8903, &(0x7f0000000040)=ANY=[]) [ 687.947235][T17486] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 688.047968][T17492] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:18 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x74}}, 0x0) 14:43:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x0, 0x0, 0x1}) 14:43:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:18 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 14:43:18 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x2, &(0x7f0000000000)) 14:43:18 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 688.804353][T17517] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 14:43:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000003c0)="2c13b8ede3f55a0cbf65dcdbbeb123f3eb01c04a", 0x14) [ 689.040164][T17527] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0x29, 0x0, 0x8800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 14:43:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) close(r0) r2 = gettid() socket$inet6(0xa, 0x3, 0x5) tkill(r2, 0x1000000000016) 14:43:19 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x15, 0x0, &(0x7f0000000180)) 14:43:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4e, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:43:20 executing program 3: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) 14:43:20 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 14:43:20 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000049c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) [ 690.419751][T17550] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 690.607365][T17559] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000b00)=0x8, 0x4) 14:43:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) [ 691.245072][T17571] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 691.400856][T17579] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:22 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:43:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000cc0000)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 14:43:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:22 executing program 2: r0 = socket(0x2, 0xa, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 14:43:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 692.062867][T17588] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 692.177439][T17594] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 14:43:22 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x228881, 0x191) 14:43:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 14:43:22 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:43:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6c, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 692.856762][T17615] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:23 executing program 2: 14:43:23 executing program 4: [ 693.055152][T17622] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:23 executing program 3: 14:43:23 executing program 5: 14:43:23 executing program 0: 14:43:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x74, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:23 executing program 4: 14:43:23 executing program 2: 14:43:23 executing program 3: 14:43:23 executing program 0: 14:43:23 executing program 5: [ 693.790488][T17633] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 693.889664][T17639] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:24 executing program 4: 14:43:24 executing program 2: 14:43:24 executing program 0: 14:43:24 executing program 3: 14:43:24 executing program 5: 14:43:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x7a, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:24 executing program 4: 14:43:24 executing program 0: 14:43:24 executing program 3: 14:43:24 executing program 2: 14:43:25 executing program 5: 14:43:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x102, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:25 executing program 4: 14:43:25 executing program 3: 14:43:25 executing program 0: 14:43:25 executing program 2: 14:43:25 executing program 5: [ 695.465162][T17667] validate_nla: 2 callbacks suppressed [ 695.465196][T17667] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:25 executing program 4: 14:43:25 executing program 3: 14:43:25 executing program 0: 14:43:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x201, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:26 executing program 2: 14:43:26 executing program 5: 14:43:26 executing program 4: 14:43:26 executing program 3: [ 696.186188][T17678] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:26 executing program 0: [ 696.347365][T17682] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:26 executing program 5: 14:43:26 executing program 2: 14:43:26 executing program 4: 14:43:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x25e, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:26 executing program 3: 14:43:27 executing program 0: 14:43:27 executing program 5: 14:43:27 executing program 2: [ 697.056185][T17694] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:27 executing program 4: [ 697.210459][T17700] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:27 executing program 3: 14:43:27 executing program 5: 14:43:27 executing program 0: 14:43:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:27 executing program 2: 14:43:27 executing program 4: 14:43:28 executing program 3: [ 697.911475][T17709] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:28 executing program 5: 14:43:28 executing program 0: [ 698.053789][T17714] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:28 executing program 2: 14:43:28 executing program 4: 14:43:28 executing program 3: 14:43:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3a0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:28 executing program 5: 14:43:28 executing program 0: 14:43:28 executing program 2: 14:43:28 executing program 4: [ 698.808959][T17725] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 698.933996][T17730] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:29 executing program 3: 14:43:29 executing program 5: 14:43:29 executing program 0: 14:43:29 executing program 2: 14:43:29 executing program 4: 14:43:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:29 executing program 3: 14:43:29 executing program 5: 14:43:30 executing program 0: [ 699.824529][T17742] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:30 executing program 2: 14:43:30 executing program 4: 14:43:30 executing program 3: 14:43:30 executing program 5: 14:43:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:30 executing program 4: 14:43:30 executing program 2: 14:43:30 executing program 0: [ 700.783625][T17761] validate_nla: 1 callbacks suppressed [ 700.783662][T17761] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:31 executing program 3: 14:43:31 executing program 5: 14:43:31 executing program 4: 14:43:31 executing program 0: [ 701.043215][T17764] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:31 executing program 2: 14:43:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:31 executing program 5: 14:43:31 executing program 3: 14:43:31 executing program 4: 14:43:31 executing program 0: 14:43:31 executing program 2: [ 701.645221][T17776] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:31 executing program 5: [ 701.737088][T17781] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:32 executing program 3: 14:43:32 executing program 4: 14:43:32 executing program 0: 14:43:32 executing program 2: 14:43:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:32 executing program 5: 14:43:32 executing program 0: [ 702.446759][T17793] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:32 executing program 3: 14:43:32 executing program 4: [ 702.576430][T17796] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:32 executing program 2: 14:43:32 executing program 5: 14:43:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x90e, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:33 executing program 0: 14:43:33 executing program 3: 14:43:33 executing program 4: 14:43:33 executing program 2: 14:43:33 executing program 5: [ 703.335620][T17807] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:33 executing program 3: [ 703.508795][T17813] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:33 executing program 0: 14:43:33 executing program 4: 14:43:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x90f, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:33 executing program 5: 14:43:34 executing program 2: 14:43:34 executing program 0: 14:43:34 executing program 3: 14:43:34 executing program 4: [ 704.273968][T17824] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:34 executing program 2: 14:43:34 executing program 5: [ 704.448559][T17828] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:34 executing program 0: 14:43:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:34 executing program 3: 14:43:34 executing program 4: 14:43:35 executing program 2: 14:43:35 executing program 5: 14:43:35 executing program 4: 14:43:35 executing program 0: 14:43:35 executing program 3: 14:43:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:35 executing program 2: 14:43:35 executing program 5: 14:43:36 executing program 4: 14:43:36 executing program 0: 14:43:36 executing program 3: [ 705.897629][T17855] validate_nla: 2 callbacks suppressed [ 705.897665][T17855] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 706.071488][T17859] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:36 executing program 2: 14:43:36 executing program 5: 14:43:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:36 executing program 4: 14:43:36 executing program 3: 14:43:36 executing program 0: 14:43:36 executing program 2: 14:43:36 executing program 5: 14:43:37 executing program 4: [ 706.805915][T17871] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:37 executing program 3: [ 707.000733][T17876] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:37 executing program 0: 14:43:37 executing program 2: 14:43:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:37 executing program 5: 14:43:37 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) 14:43:37 executing program 3: 14:43:37 executing program 0: 14:43:37 executing program 2: [ 707.747664][T17890] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:38 executing program 4: [ 707.856669][T17894] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:38 executing program 5: 14:43:38 executing program 0: 14:43:38 executing program 3: 14:43:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:38 executing program 2: 14:43:38 executing program 4: 14:43:38 executing program 5: [ 708.570053][T17905] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:38 executing program 0: 14:43:38 executing program 3: [ 708.686288][T17910] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:39 executing program 2: 14:43:39 executing program 5: 14:43:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xe09, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:39 executing program 4: 14:43:39 executing program 0: 14:43:39 executing program 3: [ 709.282736][T17919] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:39 executing program 2: [ 709.513468][T17926] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:39 executing program 5: 14:43:39 executing program 4: 14:43:39 executing program 0: 14:43:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:40 executing program 3: 14:43:40 executing program 2: 14:43:40 executing program 5: 14:43:40 executing program 4: 14:43:40 executing program 0: 14:43:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xf09, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:40 executing program 3: 14:43:40 executing program 5: 14:43:40 executing program 2: 14:43:40 executing program 4: 14:43:41 executing program 0: [ 710.989420][T17957] validate_nla: 3 callbacks suppressed [ 710.989456][T17957] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:41 executing program 3: 14:43:41 executing program 5: 14:43:41 executing program 2: 14:43:41 executing program 4: 14:43:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x1100, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:41 executing program 0: 14:43:41 executing program 3: 14:43:41 executing program 5: 14:43:41 executing program 2: 14:43:42 executing program 4: [ 711.839007][T17968] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 711.927540][T17972] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:42 executing program 0: 14:43:42 executing program 3: 14:43:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x1200, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:42 executing program 4: 14:43:42 executing program 5: 14:43:42 executing program 2: 14:43:42 executing program 0: 14:43:42 executing program 3: [ 712.659226][T17983] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 712.809572][T17988] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:43 executing program 4: 14:43:43 executing program 2: 14:43:43 executing program 5: 14:43:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:43 executing program 0: 14:43:43 executing program 3: 14:43:43 executing program 4: 14:43:43 executing program 5: 14:43:43 executing program 2: [ 713.522056][T17999] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 713.669361][T18004] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:43 executing program 3: 14:43:43 executing program 0: 14:43:44 executing program 4: 14:43:44 executing program 5: 14:43:44 executing program 2: 14:43:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2500, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:44 executing program 0: 14:43:44 executing program 3: 14:43:44 executing program 4: 14:43:44 executing program 5: [ 714.428727][T18016] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:44 executing program 2: [ 714.556267][T18020] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:45 executing program 0: 14:43:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2f00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:45 executing program 3: 14:43:45 executing program 4: 14:43:45 executing program 5: 14:43:45 executing program 2: 14:43:45 executing program 0: [ 715.251460][T18031] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:45 executing program 3: 14:43:45 executing program 4: 14:43:45 executing program 5: 14:43:45 executing program 2: 14:43:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3200, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:45 executing program 0: 14:43:46 executing program 3: 14:43:46 executing program 4: 14:43:46 executing program 5: [ 716.114085][T18047] validate_nla: 1 callbacks suppressed [ 716.114120][T18047] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:46 executing program 2: [ 716.273562][T18052] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:46 executing program 0: 14:43:46 executing program 3: 14:43:46 executing program 4: 14:43:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3a00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:46 executing program 5: 14:43:46 executing program 2: 14:43:47 executing program 0: [ 716.993467][T18063] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:47 executing program 3: 14:43:47 executing program 4: [ 717.222775][T18070] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:47 executing program 2: 14:43:47 executing program 5: 14:43:47 executing program 0: 14:43:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:47 executing program 3: 14:43:47 executing program 4: 14:43:48 executing program 5: 14:43:48 executing program 2: [ 717.944390][T18081] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:48 executing program 0: [ 718.046697][T18084] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:48 executing program 3: 14:43:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:48 executing program 5: 14:43:48 executing program 4: 14:43:48 executing program 2: 14:43:48 executing program 0: 14:43:48 executing program 3: [ 718.764446][T18096] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:49 executing program 5: [ 718.915350][T18101] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:49 executing program 4: 14:43:49 executing program 2: 14:43:49 executing program 0: 14:43:49 executing program 3: 14:43:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4788, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:49 executing program 5: 14:43:49 executing program 4: [ 719.559373][T18112] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:49 executing program 2: 14:43:49 executing program 3: [ 719.683393][T18116] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:49 executing program 0: 14:43:50 executing program 5: 14:43:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:50 executing program 4: 14:43:50 executing program 3: 14:43:50 executing program 2: 14:43:50 executing program 5: 14:43:50 executing program 0: 14:43:50 executing program 4: 14:43:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4888, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:50 executing program 3: 14:43:50 executing program 2: 14:43:51 executing program 5: 14:43:51 executing program 0: 14:43:51 executing program 4: 14:43:51 executing program 2: 14:43:51 executing program 3: 14:43:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:51 executing program 0: 14:43:51 executing program 5: 14:43:51 executing program 4: [ 721.700569][T18155] validate_nla: 4 callbacks suppressed [ 721.700602][T18155] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:52 executing program 3: 14:43:52 executing program 2: 14:43:52 executing program 0: [ 721.881633][T18160] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:52 executing program 5: 14:43:52 executing program 4: 14:43:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4e00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:52 executing program 3: 14:43:52 executing program 0: 14:43:52 executing program 2: 14:43:52 executing program 5: [ 722.600350][T18171] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 722.732167][T18175] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:53 executing program 4: 14:43:53 executing program 3: 14:43:53 executing program 0: 14:43:53 executing program 5: 14:43:53 executing program 2: 14:43:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x5865, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:53 executing program 4: [ 723.358823][T18187] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:53 executing program 5: [ 723.471347][T18190] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:53 executing program 0: 14:43:53 executing program 3: 14:43:53 executing program 2: 14:43:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x5e02, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:54 executing program 4: 14:43:54 executing program 5: [ 724.080597][T18200] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:54 executing program 2: 14:43:54 executing program 0: 14:43:54 executing program 3: [ 724.225241][T18204] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:54 executing program 5: 14:43:54 executing program 4: 14:43:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:54 executing program 2: 14:43:54 executing program 0: 14:43:54 executing program 3: 14:43:55 executing program 4: 14:43:55 executing program 5: [ 724.936226][T18215] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 725.020540][T18220] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:55 executing program 0: 14:43:55 executing program 2: 14:43:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6558, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:55 executing program 4: 14:43:55 executing program 3: 14:43:55 executing program 5: 14:43:55 executing program 0: 14:43:56 executing program 2: 14:43:56 executing program 4: 14:43:56 executing program 3: 14:43:56 executing program 5: 14:43:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6800, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:56 executing program 0: 14:43:56 executing program 4: 14:43:56 executing program 2: 14:43:56 executing program 3: 14:43:56 executing program 5: 14:43:56 executing program 0: 14:43:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6c00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:57 executing program 4: 14:43:57 executing program 2: 14:43:57 executing program 5: 14:43:57 executing program 3: [ 727.134747][T18261] validate_nla: 4 callbacks suppressed [ 727.134782][T18261] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:57 executing program 0: [ 727.336942][T18265] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:57 executing program 4: 14:43:57 executing program 2: 14:43:57 executing program 3: 14:43:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:57 executing program 5: 14:43:58 executing program 0: 14:43:58 executing program 4: [ 727.962690][T18276] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:58 executing program 2: 14:43:58 executing program 3: [ 728.151934][T18281] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:58 executing program 5: 14:43:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x7a00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:58 executing program 0: 14:43:58 executing program 3: 14:43:58 executing program 4: 14:43:58 executing program 2: [ 728.758315][T18291] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:59 executing program 0: 14:43:59 executing program 5: [ 728.888354][T18295] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:59 executing program 3: 14:43:59 executing program 4: 14:43:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:43:59 executing program 2: 14:43:59 executing program 5: 14:43:59 executing program 0: [ 729.561649][T18305] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:43:59 executing program 3: [ 729.737154][T18311] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:00 executing program 4: 14:44:00 executing program 5: 14:44:00 executing program 2: 14:44:00 executing program 0: 14:44:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x8847, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:00 executing program 3: 14:44:00 executing program 4: 14:44:00 executing program 5: [ 730.482258][T18322] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:00 executing program 2: [ 730.584329][T18326] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:00 executing program 0: 14:44:01 executing program 3: 14:44:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x8848, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:01 executing program 5: 14:44:01 executing program 4: 14:44:01 executing program 2: 14:44:01 executing program 0: 14:44:01 executing program 3: 14:44:01 executing program 5: 14:44:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xa003, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:01 executing program 4: 14:44:01 executing program 2: 14:44:01 executing program 3: 14:44:02 executing program 0: 14:44:02 executing program 5: 14:44:02 executing program 4: 14:44:02 executing program 2: 14:44:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:02 executing program 3: 14:44:02 executing program 0: 14:44:02 executing program 5: 14:44:02 executing program 4: [ 732.723035][T18367] validate_nla: 4 callbacks suppressed [ 732.723070][T18367] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:03 executing program 2: 14:44:03 executing program 3: 14:44:03 executing program 0: [ 732.913732][T18371] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:03 executing program 5: 14:44:03 executing program 4: 14:44:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xff0f, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:03 executing program 3: 14:44:03 executing program 2: 14:44:03 executing program 0: [ 733.612847][T18382] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:03 executing program 5: 14:44:04 executing program 4: [ 733.885207][T18382] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:04 executing program 3: 14:44:04 executing program 0: 14:44:04 executing program 2: 14:44:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:04 executing program 5: 14:44:04 executing program 4: 14:44:04 executing program 3: [ 734.503885][T18397] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:04 executing program 0: 14:44:04 executing program 2: [ 734.668264][T18403] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:05 executing program 4: 14:44:05 executing program 5: 14:44:05 executing program 3: 14:44:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfffe, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:05 executing program 2: 14:44:05 executing program 0: 14:44:05 executing program 4: 14:44:05 executing program 5: [ 735.448051][T18415] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:05 executing program 3: [ 735.600803][T18420] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:06 executing program 0: 14:44:06 executing program 2: 14:44:06 executing program 5: 14:44:06 executing program 4: 14:44:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x12d34, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:06 executing program 3: [ 736.366235][T18432] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:06 executing program 2: 14:44:06 executing program 0: [ 736.489010][T18435] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:06 executing program 5: 14:44:06 executing program 4: 14:44:06 executing program 3: 14:44:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x20000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:07 executing program 2: 14:44:07 executing program 0: 14:44:07 executing program 5: 14:44:07 executing program 4: 14:44:07 executing program 3: 14:44:07 executing program 2: 14:44:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2d2cc, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:07 executing program 0: 14:44:07 executing program 4: 14:44:07 executing program 5: 14:44:08 executing program 3: [ 737.879882][T18461] validate_nla: 2 callbacks suppressed [ 737.879918][T18461] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:08 executing program 0: [ 738.014222][T18466] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:08 executing program 4: 14:44:08 executing program 2: 14:44:08 executing program 5: 14:44:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x34000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:08 executing program 3: 14:44:08 executing program 0: 14:44:08 executing program 2: 14:44:08 executing program 4: [ 738.677582][T18476] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:08 executing program 5: [ 738.795024][T18480] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:09 executing program 3: 14:44:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:09 executing program 2: 14:44:09 executing program 0: 14:44:09 executing program 5: 14:44:09 executing program 4: 14:44:09 executing program 3: [ 739.481800][T18490] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 739.664056][T18497] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:09 executing program 2: 14:44:09 executing program 0: 14:44:10 executing program 5: 14:44:10 executing program 4: 14:44:10 executing program 3: 14:44:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x80000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:10 executing program 2: [ 740.293762][T18507] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:10 executing program 0: 14:44:10 executing program 4: 14:44:10 executing program 5: 14:44:10 executing program 3: [ 740.443773][T18510] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:10 executing program 2: 14:44:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:11 executing program 0: 14:44:11 executing program 5: 14:44:11 executing program 4: 14:44:11 executing program 2: 14:44:11 executing program 3: [ 741.119363][T18521] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 741.290851][T18527] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:11 executing program 5: 14:44:11 executing program 0: 14:44:11 executing program 4: 14:44:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:12 executing program 3: 14:44:12 executing program 2: 14:44:12 executing program 0: 14:44:12 executing program 5: 14:44:12 executing program 4: 14:44:12 executing program 2: 14:44:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x400300, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:12 executing program 3: 14:44:12 executing program 0: 14:44:12 executing program 5: 14:44:12 executing program 4: 14:44:13 executing program 3: 14:44:13 executing program 2: 14:44:13 executing program 0: 14:44:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:13 executing program 5: 14:44:13 executing program 4: [ 743.421525][T18566] validate_nla: 4 callbacks suppressed [ 743.421572][T18566] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:13 executing program 3: 14:44:13 executing program 0: 14:44:13 executing program 2: [ 743.631766][T18571] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:13 executing program 5: 14:44:13 executing program 4: 14:44:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:14 executing program 2: 14:44:14 executing program 3: 14:44:14 executing program 0: 14:44:14 executing program 5: [ 744.282456][T18581] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:14 executing program 4: [ 744.427970][T18587] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:14 executing program 2: 14:44:14 executing program 3: 14:44:14 executing program 0: 14:44:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2010000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:15 executing program 5: 14:44:15 executing program 2: 14:44:15 executing program 4: 14:44:15 executing program 0: 14:44:15 executing program 3: [ 745.172288][T18597] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 745.288269][T18603] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:15 executing program 5: 14:44:15 executing program 2: 14:44:15 executing program 4: 14:44:15 executing program 0: 14:44:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:15 executing program 3: 14:44:16 executing program 5: 14:44:16 executing program 2: 14:44:16 executing program 4: [ 746.080710][T18614] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:16 executing program 0: [ 746.192067][T18618] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:16 executing program 3: 14:44:16 executing program 5: 14:44:16 executing program 2: 14:44:16 executing program 0: 14:44:16 executing program 4: [ 746.758315][T18628] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 746.890041][T18632] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:17 executing program 3: 14:44:17 executing program 0: 14:44:17 executing program 5: 14:44:17 executing program 2: 14:44:17 executing program 4: 14:44:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:17 executing program 3: 14:44:17 executing program 2: 14:44:17 executing program 5: 14:44:17 executing program 0: 14:44:17 executing program 4: 14:44:18 executing program 3: 14:44:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:18 executing program 5: 14:44:18 executing program 2: 14:44:18 executing program 4: 14:44:18 executing program 0: 14:44:18 executing program 3: 14:44:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:18 executing program 5: 14:44:18 executing program 2: 14:44:19 executing program 4: 14:44:19 executing program 0: [ 749.036639][T18672] validate_nla: 4 callbacks suppressed [ 749.036675][T18672] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 749.178566][T18677] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:19 executing program 3: 14:44:19 executing program 2: 14:44:19 executing program 5: 14:44:19 executing program 0: 14:44:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:19 executing program 4: 14:44:19 executing program 2: 14:44:19 executing program 3: 14:44:19 executing program 5: 14:44:20 executing program 0: [ 750.434308][T18695] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:20 executing program 4: 14:44:20 executing program 3: 14:44:20 executing program 0: 14:44:20 executing program 5: [ 750.654164][T18698] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:20 executing program 2: 14:44:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:21 executing program 3: 14:44:21 executing program 5: 14:44:21 executing program 4: 14:44:21 executing program 0: 14:44:21 executing program 2: [ 751.312578][T18708] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 751.449315][T18714] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:21 executing program 3: 14:44:21 executing program 4: 14:44:21 executing program 0: 14:44:22 executing program 5: 14:44:22 executing program 2: 14:44:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 752.248744][T18726] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:22 executing program 3: 14:44:22 executing program 4: 14:44:22 executing program 2: 14:44:22 executing program 5: 14:44:22 executing program 0: [ 752.439099][T18729] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xb000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:22 executing program 3: 14:44:23 executing program 2: 14:44:23 executing program 5: 14:44:23 executing program 0: 14:44:23 executing program 4: [ 753.087711][T18739] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 753.210356][T18745] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:23 executing program 3: 14:44:23 executing program 5: 14:44:23 executing program 2: 14:44:23 executing program 4: 14:44:23 executing program 0: 14:44:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:24 executing program 3: 14:44:24 executing program 5: 14:44:24 executing program 4: 14:44:24 executing program 2: [ 754.045535][T18760] validate_nla: 1 callbacks suppressed [ 754.045570][T18760] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:24 executing program 0: 14:44:24 executing program 3: 14:44:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xd000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:24 executing program 0: 14:44:24 executing program 2: 14:44:24 executing program 4: 14:44:24 executing program 5: [ 754.770541][T18771] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:25 executing program 3: [ 754.952708][T18778] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:25 executing program 4: 14:44:25 executing program 2: 14:44:25 executing program 0: 14:44:25 executing program 5: 14:44:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:25 executing program 3: 14:44:25 executing program 4: 14:44:25 executing program 0: 14:44:25 executing program 2: [ 755.704938][T18789] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:25 executing program 5: [ 755.861257][T18792] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:26 executing program 3: 14:44:26 executing program 0: 14:44:26 executing program 4: 14:44:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xe090000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:26 executing program 2: 14:44:26 executing program 5: 14:44:26 executing program 3: [ 756.569064][T18806] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:26 executing program 4: 14:44:26 executing program 0: 14:44:27 executing program 2: [ 756.775293][T18810] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:27 executing program 5: 14:44:27 executing program 3: 14:44:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xf000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:27 executing program 4: 14:44:27 executing program 2: 14:44:27 executing program 0: 14:44:27 executing program 5: 14:44:27 executing program 3: [ 757.489483][T18820] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:27 executing program 4: [ 757.622746][T18825] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:27 executing program 2: 14:44:28 executing program 5: 14:44:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xf090000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:28 executing program 0: 14:44:28 executing program 4: 14:44:28 executing program 3: [ 758.235239][T18835] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:28 executing program 2: 14:44:28 executing program 5: 14:44:28 executing program 0: 14:44:28 executing program 4: 14:44:28 executing program 3: 14:44:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:29 executing program 2: 14:44:29 executing program 5: 14:44:29 executing program 0: 14:44:29 executing program 4: [ 759.122692][T18852] validate_nla: 1 callbacks suppressed [ 759.122728][T18852] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:29 executing program 3: [ 759.321607][T18856] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:29 executing program 2: 14:44:29 executing program 5: 14:44:29 executing program 4: 14:44:29 executing program 0: 14:44:29 executing program 3: 14:44:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x11000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:30 executing program 2: 14:44:30 executing program 5: 14:44:30 executing program 4: [ 760.125739][T18871] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:30 executing program 3: 14:44:30 executing program 0: 14:44:30 executing program 2: [ 760.313093][T18874] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:30 executing program 4: 14:44:30 executing program 5: 14:44:30 executing program 3: 14:44:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x12000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:31 executing program 0: 14:44:31 executing program 2: [ 761.115287][T18887] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 761.283325][T18892] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:31 executing program 4: 14:44:31 executing program 5: 14:44:31 executing program 3: 14:44:31 executing program 0: 14:44:31 executing program 2: 14:44:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:32 executing program 3: 14:44:32 executing program 4: 14:44:32 executing program 5: 14:44:32 executing program 2: [ 762.164113][T18902] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:32 executing program 0: [ 762.319575][T18905] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:32 executing program 3: 14:44:33 executing program 4: 14:44:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x25000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:33 executing program 0: 14:44:33 executing program 5: 14:44:33 executing program 2: [ 763.234086][T18919] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:33 executing program 4: [ 763.414299][T18924] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:33 executing program 3: 14:44:33 executing program 5: 14:44:33 executing program 2: 14:44:33 executing program 0: 14:44:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x2f000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:34 executing program 4: 14:44:34 executing program 5: 14:44:34 executing program 3: 14:44:34 executing program 0: 14:44:34 executing program 2: [ 764.316795][T18935] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:34 executing program 4: [ 764.498437][T18939] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:35 executing program 5: 14:44:35 executing program 3: 14:44:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x32000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:35 executing program 0: 14:44:35 executing program 2: 14:44:35 executing program 4: [ 765.271060][T18952] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:35 executing program 5: [ 765.398020][T18955] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:35 executing program 3: 14:44:35 executing program 0: 14:44:35 executing program 4: 14:44:35 executing program 2: 14:44:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x342d0100, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:36 executing program 5: 14:44:36 executing program 3: 14:44:36 executing program 0: 14:44:36 executing program 4: [ 766.266870][T18967] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:36 executing program 2: [ 766.395223][T18972] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:36 executing program 3: 14:44:36 executing program 5: 14:44:36 executing program 0: 14:44:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3a000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:37 executing program 4: 14:44:37 executing program 2: [ 767.222142][T18983] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:37 executing program 3: 14:44:37 executing program 5: 14:44:37 executing program 0: [ 767.469665][T18984] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:37 executing program 4: 14:44:37 executing program 2: 14:44:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:38 executing program 5: 14:44:38 executing program 0: 14:44:38 executing program 3: 14:44:38 executing program 4: [ 768.364767][T19000] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:38 executing program 2: [ 768.591383][T19005] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:38 executing program 5: 14:44:38 executing program 0: 14:44:38 executing program 3: 14:44:39 executing program 4: 14:44:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x40000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:39 executing program 2: 14:44:39 executing program 5: 14:44:39 executing program 0: [ 769.366952][T19015] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:39 executing program 3: 14:44:39 executing program 4: [ 769.487195][T19019] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:39 executing program 2: 14:44:39 executing program 0: 14:44:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x48000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:40 executing program 5: 14:44:40 executing program 3: 14:44:40 executing program 4: 14:44:40 executing program 2: [ 770.272788][T19030] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:40 executing program 0: [ 770.448291][T19036] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:40 executing program 3: 14:44:40 executing program 5: 14:44:40 executing program 2: 14:44:40 executing program 4: 14:44:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4c000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:41 executing program 0: 14:44:41 executing program 5: 14:44:41 executing program 3: 14:44:41 executing program 2: [ 771.187428][T19048] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:41 executing program 4: 14:44:41 executing program 0: [ 771.416001][T19053] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:41 executing program 3: 14:44:41 executing program 5: 14:44:41 executing program 2: 14:44:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x4e000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:42 executing program 4: 14:44:42 executing program 0: 14:44:42 executing program 3: 14:44:42 executing program 5: [ 772.237969][T19065] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:42 executing program 2: 14:44:42 executing program 4: 14:44:42 executing program 0: [ 772.448551][T19069] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:43 executing program 3: 14:44:43 executing program 2: 14:44:43 executing program 5: 14:44:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x5e020000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:43 executing program 4: 14:44:43 executing program 0: [ 773.246779][T19082] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 773.377337][T19086] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:43 executing program 2: 14:44:43 executing program 3: 14:44:43 executing program 5: 14:44:43 executing program 4: 14:44:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x60000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:44 executing program 0: 14:44:44 executing program 2: 14:44:44 executing program 5: 14:44:44 executing program 3: 14:44:44 executing program 4: 14:44:44 executing program 0: 14:44:44 executing program 2: 14:44:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x65580000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:44 executing program 5: 14:44:44 executing program 4: 14:44:44 executing program 3: [ 774.797226][T19111] validate_nla: 2 callbacks suppressed [ 774.797263][T19111] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:45 executing program 0: [ 774.972614][T19115] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:45 executing program 2: 14:44:45 executing program 5: 14:44:45 executing program 4: 14:44:45 executing program 3: 14:44:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x68000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:45 executing program 0: 14:44:45 executing program 2: 14:44:46 executing program 3: [ 775.805196][T19127] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:46 executing program 5: 14:44:46 executing program 4: [ 776.102309][T19133] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:46 executing program 0: 14:44:46 executing program 2: 14:44:46 executing program 5: 14:44:46 executing program 3: 14:44:46 executing program 4: 14:44:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x6c000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 776.814479][T19144] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:47 executing program 0: 14:44:47 executing program 2: 14:44:47 executing program 5: [ 777.006280][T19149] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:47 executing program 4: 14:44:47 executing program 3: 14:44:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x74000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:47 executing program 2: 14:44:47 executing program 0: 14:44:47 executing program 5: 14:44:48 executing program 4: 14:44:48 executing program 3: [ 777.811338][T19161] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:48 executing program 2: [ 778.033594][T19166] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:48 executing program 0: 14:44:48 executing program 5: 14:44:48 executing program 3: 14:44:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x7a000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:48 executing program 4: 14:44:48 executing program 2: 14:44:48 executing program 0: 14:44:48 executing program 5: [ 778.738050][T19177] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:49 executing program 3: [ 778.907244][T19181] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:49 executing program 4: 14:44:49 executing program 0: 14:44:49 executing program 5: 14:44:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x81000000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:49 executing program 2: 14:44:49 executing program 3: 14:44:49 executing program 4: 14:44:50 executing program 0: 14:44:50 executing program 5: 14:44:50 executing program 2: 14:44:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x81ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:50 executing program 4: 14:44:50 executing program 3: [ 780.367490][T19206] validate_nla: 2 callbacks suppressed [ 780.367526][T19206] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:50 executing program 5: 14:44:50 executing program 0: 14:44:50 executing program 2: [ 780.596771][T19211] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:50 executing program 4: 14:44:51 executing program 3: 14:44:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x88470000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:51 executing program 5: 14:44:51 executing program 2: 14:44:51 executing program 0: 14:44:51 executing program 4: 14:44:51 executing program 3: [ 781.365882][T19223] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:51 executing program 5: [ 781.570996][T19228] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:51 executing program 0: 14:44:52 executing program 2: 14:44:52 executing program 4: 14:44:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x88480000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:52 executing program 3: 14:44:52 executing program 5: 14:44:52 executing program 0: 14:44:52 executing program 2: [ 782.293441][T19240] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 782.457044][T19243] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:52 executing program 3: 14:44:52 executing program 4: 14:44:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x88a8ffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:52 executing program 2: 14:44:53 executing program 5: 14:44:53 executing program 0: 14:44:53 executing program 4: 14:44:53 executing program 3: [ 783.080776][T19256] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 783.243489][T19256] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:53 executing program 2: 14:44:53 executing program 5: 14:44:53 executing program 0: 14:44:53 executing program 4: 14:44:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x919faaa0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:53 executing program 3: 14:44:54 executing program 2: 14:44:54 executing program 5: [ 784.055099][T19270] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:54 executing program 0: 14:44:54 executing program 4: [ 784.225092][T19274] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:54 executing program 3: 14:44:54 executing program 5: 14:44:54 executing program 2: 14:44:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x9effffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:54 executing program 4: 14:44:54 executing program 0: 14:44:55 executing program 3: 14:44:55 executing program 5: 14:44:55 executing program 2: 14:44:55 executing program 4: 14:44:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xa0030000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:55 executing program 0: 14:44:55 executing program 3: 14:44:55 executing program 5: 14:44:55 executing program 2: [ 785.688912][T19300] validate_nla: 2 callbacks suppressed [ 785.688948][T19300] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:55 executing program 4: [ 785.850013][T19305] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:56 executing program 0: 14:44:56 executing program 3: 14:44:56 executing program 5: 14:44:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xa0aa9f91, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:56 executing program 4: 14:44:56 executing program 2: 14:44:56 executing program 0: 14:44:56 executing program 3: [ 786.700161][T19316] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:56 executing program 5: 14:44:57 executing program 2: 14:44:57 executing program 4: [ 786.933828][T19321] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:57 executing program 3: 14:44:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xc3ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:57 executing program 0: 14:44:57 executing program 4: 14:44:57 executing program 5: 14:44:57 executing program 2: [ 787.645971][T19332] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:57 executing program 3: 14:44:58 executing program 0: [ 787.828184][T19339] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:58 executing program 4: 14:44:58 executing program 2: 14:44:58 executing program 5: 14:44:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xccd20200, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:58 executing program 0: 14:44:58 executing program 3: 14:44:58 executing program 4: 14:44:58 executing program 2: 14:44:58 executing program 5: [ 788.611846][T19349] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 788.759332][T19355] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:44:59 executing program 3: 14:44:59 executing program 0: 14:44:59 executing program 4: 14:44:59 executing program 5: 14:44:59 executing program 2: 14:44:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xefffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:44:59 executing program 4: 14:44:59 executing program 3: 14:44:59 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_setup(0x83, &(0x7f0000000080)=0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x90ba01, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_ENTRY(r3, &(0x7f0000000100)={0x90}, 0x90) ftruncate(r3, 0x2007fff) io_submit(r2, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}]) 14:44:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0xfffffffffffffff0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) [ 789.654946][T19368] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 789.814035][T19368] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[], 0x78) creat(&(0x7f0000000100)='./file0\x00', 0x0) 14:45:00 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@dstopts={0x0, 0x0, [], [@enc_lim, @enc_lim]}]}}}}}, 0x0) 14:45:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) write(r0, &(0x7f0000000000), 0x52698b21) 14:45:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x129202, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000002c0)="a62000000000000000", 0x9}]) 14:45:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000040000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x2c}}, 0x0) 14:45:00 executing program 2: dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth0_to_bond\x00'}, 0x18) 14:45:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r0, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) sendto(r0, &(0x7f00000000c0)='J', 0xffffffffffffff71, 0x8845, 0x0, 0x2e3) [ 790.840340][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfcffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 790.932171][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 791.067707][T19411] IPVS: stopping backup sync thread 19413 ... 14:45:01 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="fb", 0x1}], 0x1, 0x18180b, 0x0) sendfile(r1, r2, 0x0, 0x200000f) [ 791.147236][T19414] IPVS: stopping backup sync thread 19417 ... [ 791.147315][T19417] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 2, id = 0 14:45:01 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000200), 0x0, &(0x7f00000004c0), 0x8) [ 791.277652][T19419] validate_nla: 2 callbacks suppressed [ 791.277688][T19419] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:01 executing program 5: r0 = openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x80800) sendfile(r1, r0, 0x0, 0x10001ff) 14:45:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x1a, 0x0, &(0x7f0000000100)) [ 791.447142][T19423] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:01 executing program 2: dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth0_to_bond\x00'}, 0x18) 14:45:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfeff0000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:02 executing program 0: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) 14:45:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0xc, 0x0, &(0x7f0000000100)) 14:45:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000000)="8b6314b0f3e731873ba5672a3ba7f2336770f2049b32a31341a1cac089f0405d46d8b030750de710a504a7009b6bddb0808399f589d3278ed79995bcb4fb004902a068da838ee82b53877c16fb393a287d962a3878c4990392d56f41712cbd94f59b5b6e9ddb000ca601ecbe9b900596f1b277f2f2dd932de834b85e6742023be724a813ff43623b2c132e16a70cad7955463c112f6f0ab5f1cde74060ca5df10c9ed3b617df1f91700e91cada7fee31d0e0ffc01ba5e59684bda2eac322c21815b3fa2646af52c6edb184ba7ed98b1392f04e83eb24b02c9cf7841f344c844f826aea1f1abc33067aa38d244f6f136b27403342d941ce8be2610fc7b2fea14709aaf0ec3c01563b5b1dc9ac675044f7c14ce0aea590651e0dd8779f61ff779877fcc8d102720a8e57560c55fd984ac1ecb493097049fa7e74ccedc65b9a608042d5194154c8a65870e03574c8f481ce8014872bff7e10051c633de8be66898a1a45cf6c2a27eca6a21cbf72ef99cbc11d61d7a40a170cc717b07ddfc3156ddd21ce5f8dee8cf8894849ec0528f3d631209018346eff96c9114e0298e29e84baf11e5e4bc21f5eb8e71bf346924e5b6605cb600dc763f702d89021e584bddb8f4af5cb87dbccb6b6aa5ecb3cb68e8ac03c427e95b822e71c39419365973248dcb81c1badc05b2493f03dac691a40fd4c402ad48d34c3d275b4452bf8eea6a5f6eeb09bf5c23c6ae9cdf69dff7dd6ad132cedd0b0ba365d5b5c32b0e7cf280349cb907605d243dc8e73f437b9b9329fe162da7cc4f614e8a5e71f2a32dd167f4e54e003d5eadc9b80db003002764f8291087d7a806b906f988cd88cf679642724e1c1b552eb896e51636240a9cb61e81cde6820142985a7b41287de314a9fc941ce04727ca8f218a732f461fe625c0bf2b1485c36278349ad844993eea690cd59c008bc6cbbeb1592034b7780f0203161cfe5a5b0e9e1eebcf84105d8060fb3219392dd261297fcb0d76dde23b3bb932a1ef9ac99b3615fa28a039e7eaba9e7398f29e6bae9acd444784bc3d10d7ba89c845d4d2eb908eef7142c60bb449bc68dacf5a377fcd8ee66c19ba892df76a7d2efa66fe061223fefc2261416600dfc4a0ce1ed2ec15a3b96391a136229836f7985f8136c063e81224c4df997812a1b634874437aa1f081a78f8723dd17b8677de1ebc7e30118978b3bf86ab781c2cccbb55685f447be5ce871c26f5ae251a87c29da02a1a843f95f19a63922863313fe0a1edddcc99460b6f5620ee3c6a2708c7420babd99c2dc4dc7ca89b1ffcddcbac988f132f5403335e7b998f1424ef84d180cd704eca4179f82adafda5919aa231e1c7a384310bde92800dad1a6cc6c1240b41d7268e500"}) [ 792.009533][T19438] IPVS: stopping backup sync thread 19440 ... 14:45:02 executing program 5: socketpair(0x2, 0xa, 0x1, &(0x7f0000000040)) [ 792.075623][T19442] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 792.272168][T19448] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:02 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:45:02 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) 14:45:02 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 14:45:02 executing program 4: request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0) 14:45:02 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 14:45:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xff0f0000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:03 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x5, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x119}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:45:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x4, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x118}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 793.164927][T19470] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:03 executing program 5: 14:45:03 executing program 4: [ 793.303775][T19475] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:03 executing program 0: [ 793.406216][T19481] ptrace attach of "/root/syz-executor.3"[19479] was attempted by "/root/syz-executor.3"[19481] [ 793.412690][T19482] ptrace attach of "/root/syz-executor.2"[19480] was attempted by "/root/syz-executor.2"[19482] 14:45:03 executing program 2: 14:45:03 executing program 3: 14:45:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xff7f0000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:03 executing program 5: 14:45:04 executing program 0: 14:45:04 executing program 3: 14:45:04 executing program 4: 14:45:04 executing program 2: [ 794.034901][T19491] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 794.233242][T19499] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:04 executing program 0: 14:45:04 executing program 5: 14:45:04 executing program 3: 14:45:04 executing program 4: 14:45:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffff0f00, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:04 executing program 2: 14:45:05 executing program 0: 14:45:05 executing program 5: 14:45:05 executing program 3: [ 795.065086][T19511] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:05 executing program 4: 14:45:05 executing program 2: [ 795.306689][T19515] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:05 executing program 4: 14:45:05 executing program 0: 14:45:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffffa888, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:05 executing program 3: 14:45:05 executing program 2: 14:45:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x11, &(0x7f00000002c0)=ANY=[], 0x58) 14:45:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}, 0x0) 14:45:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000280)=0x54) 14:45:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0xf, 0x0, &(0x7f00000002c0)) 14:45:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x81000000}]}, 0x38}}, 0x0) 14:45:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffffff7f, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:06 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1f5}) 14:45:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r1, r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8904, &(0x7f0000000000)) 14:45:07 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80108906, 0x0) 14:45:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x18, &(0x7f0000000100)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@private2}, 0x0, @in6=@private0}}, 0xe8) [ 796.853132][T19548] validate_nla: 2 callbacks suppressed [ 796.853165][T19548] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:07 executing program 2: unshare(0x4020600) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sync_file_range(r0, 0x0, 0x0, 0x0) 14:45:07 executing program 5: r0 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee01}}, {{@in6=@private2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) [ 797.097271][T19554] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:07 executing program 4: unshare(0x4020600) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012162) 14:45:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) 14:45:07 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:45:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffffff81, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) 14:45:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) 14:45:07 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14440, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 797.747272][T19576] ptrace attach of "/root/syz-executor.0"[19575] was attempted by "/root/syz-executor.0"[19576] 14:45:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r1, r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8918, 0x0) 14:45:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) [ 797.908921][T19580] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 798.120739][T19590] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:08 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) 14:45:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+60000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000002300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0)) 14:45:08 executing program 0: ioprio_set$pid(0x0, 0x0, 0x86381e39e5d358be) 14:45:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffffff9e, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:08 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) unshare(0x4020600) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 14:45:08 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001680)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000016c0)) 14:45:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0xe0, 0x29, 0x0, 0x0) [ 798.969857][T19614] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, &(0x7f0000000140)={0x0, r3+10000000}, 0x0, 0x0) 14:45:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x20020980) [ 799.145480][T19619] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:09 executing program 4: unshare(0x4020600) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 14:45:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getown(r1, 0x9) 14:45:09 executing program 2: r0 = getpid() ioprio_set$pid(0x3, r0, 0x0) 14:45:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffffffc3, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:09 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14440, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff}) 14:45:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 14:45:10 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) [ 799.943274][T19638] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 800.041086][T19644] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:10 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffff7fff}) 14:45:10 executing program 2: r0 = getpid() ioprio_set$pid(0x2, r0, 0x4004) 14:45:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f00000000c0)=""/145, &(0x7f00000002c0)=0xffffffffffffff67) 14:45:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xffffffef, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:10 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @datasec={0x0, 0xe, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 'p'}]}}, 0x0, 0xe6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 800.555311][ T8718] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 800.661046][T19661] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:10 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) bind(r0, 0x0, 0x0) 14:45:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioprio_set$pid(0x3, 0x0, 0x4007) 14:45:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup3(r1, r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8919, 0x0) [ 800.785118][T19666] ptrace attach of "/root/syz-executor.4"[19665] was attempted by "/root/syz-executor.4"[19666] [ 800.805311][ T8718] usb 4-1: Using ep0 maxpacket: 32 14:45:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$BPF_PROG_GET_FD_BY_ID(0x10, 0x0, 0x0) [ 800.876405][T19668] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 800.940952][ T8718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.951203][ T8718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.961293][ T8718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 800.971338][ T8718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 14:45:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfffffff0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 801.265483][ T8718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 801.274946][ T8718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.283334][ T8718] usb 4-1: Product: syz [ 801.287683][ T8718] usb 4-1: Manufacturer: syz [ 801.292560][ T8718] usb 4-1: SerialNumber: syz 14:45:11 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 801.406489][ T8718] usbip-host 4-1: 4-1 is not in match_busid table... skip! 14:45:13 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14440, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0xbde8, 0x4}) 14:45:13 executing program 5: 14:45:13 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) vmsplice(r0, &(0x7f0000000880)=[{0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:45:13 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:45:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioprio_set$pid(0x2, 0x0, 0x4007) [ 803.210424][ T3789] usb 4-1: USB disconnect, device number 4 [ 803.321477][T19707] validate_nla: 2 callbacks suppressed [ 803.321519][T19707] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x2a, &(0x7f0000000100)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@private2}, 0x0, @in6=@private0}}, 0xe8) [ 803.605944][T19720] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:13 executing program 0: 14:45:13 executing program 4: 14:45:13 executing program 2: 14:45:14 executing program 3: 14:45:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:14 executing program 5: 14:45:14 executing program 4: 14:45:14 executing program 2: 14:45:14 executing program 0: [ 804.348858][T19733] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:14 executing program 3: [ 804.456292][T19738] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:14 executing program 5: 14:45:15 executing program 4: 14:45:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:15 executing program 0: 14:45:15 executing program 2: 14:45:15 executing program 3: 14:45:15 executing program 5: [ 805.247244][T19751] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:15 executing program 4: 14:45:15 executing program 0: 14:45:15 executing program 2: [ 805.443459][T19756] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:15 executing program 3: 14:45:15 executing program 5: 14:45:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:16 executing program 0: 14:45:16 executing program 4: 14:45:16 executing program 2: [ 806.153125][T19766] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:16 executing program 3: [ 806.234392][T19770] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:16 executing program 5: 14:45:16 executing program 4: 14:45:16 executing program 0: 14:45:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:16 executing program 2: 14:45:16 executing program 3: [ 806.902839][T19782] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:17 executing program 5: 14:45:17 executing program 4: [ 807.118228][T19787] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:17 executing program 0: 14:45:17 executing program 2: 14:45:17 executing program 5: 14:45:17 executing program 3: 14:45:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x5, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:17 executing program 4: 14:45:17 executing program 2: 14:45:17 executing program 0: 14:45:18 executing program 3: 14:45:18 executing program 5: 14:45:18 executing program 4: 14:45:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x6, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:18 executing program 2: 14:45:18 executing program 0: 14:45:18 executing program 5: 14:45:18 executing program 3: [ 808.558183][T19814] validate_nla: 2 callbacks suppressed [ 808.558218][T19814] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:18 executing program 4: [ 808.753533][T19818] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:19 executing program 2: 14:45:19 executing program 0: 14:45:19 executing program 5: 14:45:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x7, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:19 executing program 3: 14:45:19 executing program 4: 14:45:19 executing program 2: 14:45:19 executing program 0: [ 809.438210][T19830] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:19 executing program 5: [ 809.602810][T19833] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0x765e}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ef13d", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2}}}}, 0x0) 14:45:20 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x179, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x25) 14:45:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x8, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:20 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x10c, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x25) 14:45:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f558362d64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791", 0x43}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 810.177587][T19846] ptrace attach of "/root/syz-executor.4"[19845] was attempted by "/root/syz-executor.4"[19846] 14:45:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="e6", 0x1}], 0x1}}], 0x1, 0x60cd800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000040)="b0", 0x7470, 0x0, 0x0, 0x0) [ 810.304176][T19850] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:20 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x154, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "af9282ff94df011eb8d2555e850a927bbb2adf", 0x0, 0x4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x25) 14:45:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@delchain={0x40, 0x65, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) [ 810.400126][T19857] ptrace attach of "/root/syz-executor.0"[19855] was attempted by "/root/syz-executor.0"[19857] [ 810.404763][T19858] ptrace attach of "/root/syz-executor.2"[19856] was attempted by "/root/syz-executor.2"[19858] 14:45:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sendmsg$unix(r0, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}], 0x40}, 0x0) [ 810.522935][T19861] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 810.687813][T19865] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:45:21 executing program 2: bpf$BPF_PROG_DETACH(0x23, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x4}, 0x10) [ 810.787322][T19871] ptrace attach of "/root/syz-executor.2"[19868] was attempted by "/root/syz-executor.2"[19871] 14:45:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x9, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:21 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 811.411127][T19882] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 811.515959][T19887] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:22 executing program 3: 14:45:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="e6", 0x1}], 0x1}}], 0x1, 0x60cd800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000040)="b0", 0x7470, 0x0, 0x0, 0x0) 14:45:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x1, 0x3, 0x3}, 0x14}}, 0x0) 14:45:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}}], 0x1, 0x0) 14:45:22 executing program 0: 14:45:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0xa, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) [ 812.138694][T19898] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:22 executing program 0: [ 812.316430][T19905] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:22 executing program 2: 14:45:22 executing program 4: 14:45:22 executing program 5: 14:45:22 executing program 3: 14:45:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0xb, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:23 executing program 2: 14:45:23 executing program 0: 14:45:23 executing program 4: 14:45:23 executing program 5: 14:45:23 executing program 3: 14:45:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0xc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:23 executing program 0: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x81}, {0x0, 0x24}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x402}], 0x8) 14:45:23 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, &(0x7f0000000440)=[{0xc}], 0xc}, 0x0) 14:45:23 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) 14:45:23 executing program 2: r0 = socket(0x11, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x6010b) 14:45:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000700), 0x4) [ 813.795525][T19929] validate_nla: 2 callbacks suppressed [ 813.795566][T19929] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 813.895645][T19939] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0xd, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, @in, 0x39bb3455}, 0xa0) 14:45:24 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000000b00)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000080)="a527b2470475102a6b10c3f9cb611a72db896d61bb2dcb1ec0727e0452bebb23b0c5a28bd3c2a380ee8e4286aa24ce6974fa0e3a96618948d423b7f35924402c6150fcaad9a6014fbd385c381170123e0d582d69f0f734539f5e4c219a9c719ea733ed26b4a13c883f8b8ab6291a836f0c7a924c096046ce1852927fb2e24fe32745079a45df54ee1c6fe7ca3b2ff6d1b6d33950759bdd3e21d030cef7adca9fef0f85fc3ffef694512cda2cc75b154bb0bbd07986f3f3e04be99902618c931083969c1d978768e3906217e96fb4badf6be57b2dd04d874a1f58", 0xda}, {&(0x7f0000000180)="48eea3313839d6a867ce92350fee399f563d70c8d230458c9ea28aafefff219969bebe718add8c4010057d378fd183f3dbdbc665b36574c6a796224c0abdb63eb8bb28b8268ed07f7f273f4e", 0x4c}, {&(0x7f0000000200)="3b1c0fdae31fffe6354e17c617d9ccd918057cde718e9d514941a064d1c155e5f84c50648aedb5b2297183f34981bb6f33eb3c6c4a7419b1bcc06907ba8aa9bcb5fd6fb3ede7f145771bed2b2613e53385f82562f302b8a10ae28548842275220d87b519f1f14dadbed8f4", 0x6b}, {&(0x7f0000000280)="95a28eb69478ff319dee11615e893aee1f1faae5f30f57b2141fc87f1f4cf5d708a2e5426e98363a5f8653e9f44065ae608f25148c68cf15a950743d25ecded9c366f7bd558416cbf19b12e54d68031b84a1cac38e5bbfc54e9ee5ae69cb2f77fc7e921142bdb4f021647d233285502303d12476d64edc5540e38a40ee8ea19e1869af97e3395d2f2693209418b3bf4a", 0x90}], 0x4, &(0x7f0000000500)=[{0x108, 0x0, 0x0, "517cb8e9bc7acc53ed541250cc3f57590cac4c74b3743fceb012c2543b6f789c5b1f72ac99a25c5625ca411c653c2b934821f5658ca9f1b1fb62be5be7f9c1c4b93f8c75163e8587545406c72d6397a4ca188b4b03407975a9131fe1b4b58741b295d432d428f9538790a4f8fc1bc1210d1a97b23e0520a0c598d6b3723492086792500d3f16ebdd574f4f4d6f879143c5b72bcf7182348a50e5ae302d73beb3132ae2cba47ecb69914b6ce23d2e071a3a99278ee9a4fb846fc72467683df16832b62b668e3df53f2dc895795e5c5853946142a3b9307e648b0cbc29389200ac8806483f932ed80bbe914cb1692bd0794a"}, {0x90, 0x0, 0x0, "4573ef8d1a10736fdc2e10e253905abf140a13a982c86a399bbddd7f443cd6ec1eef0928a396a34cd44548a55f7349c0d2f5c088eee23fe066b8cfbe04559442df042fc2bbcf85d1907a711a32fef48dffcace08938472cb12ec36304dd0eeb3ce032e5a8c63ed95749fa05a2e773df5a0bcecb19d0db38e26"}, {0xc8, 0x0, 0x0, "7fae19d8b4f06804f7ebc0bcdf2e79c6a8168ebe36d74c4900f6f9926b818aeb960d4e0b688d7b27a7bb196d2576c74e7944d561894d3ff9d84023d82ff0d63e0271987bd3aacd37bbd98425737d9361e46d120fb0e5dde6fe0947258f131b01b8203269f1b7c4525cb541f2584a58436159e2ebbf709dcf2e207cf9b041d23cc7fdb3b66ed47f47de3677ab5f019c4a163d0ca95477897dee44550716de78d589e700b0937ce382ad0d3efbbdd8c3b790"}, {0xc8, 0x0, 0x0, "ad56534e9b18c666796fb27dd328507045e88748d5e771c6de63b97688a7dd9aff43b6a3995a13ff58c9db10d2cad35c684c558f0df4327dcf43248d7d9fb8283112ce36302c363d865a1bbe78436859642a06a7897f4015c2a65cdc5e4de1a64a81db8cc2769f0db14d354072d8c0e3e09b61a420fb43aa111d72e3109a52f0f83b8b44197805bbaee2620ad00ad92bcbe1eae4229931d474c0ed1bf32833c93b7f56601b885a2dd3c0418fc06b345d4c"}, {0x60, 0x0, 0x0, "7c947c134e5a42cbb38f441d17aa102e2f2f69e2d463bd3d1d633f40d85ff9a26ad26eecf731bafc52cf61c33f170ad6367006f8d310115ab9cbd0476e41ef8709cf519399b0bf33cb"}, {0x70, 0x0, 0x0, "0e88a3948a52060e2de8657b5892091140200d84bce2fdb25e93fc8a086c5a393da6e745a06e3a831c8ba65129d544724dd499369f0129e211e2972d60d48906b5fdc6b8f8744ebd6cd1682333339a2bfb4b5201f9d7aaad4c"}, {0xe0, 0x0, 0x0, "60a0cd4cffb1d4896968626f7e5317d6ff32857a077ff54103ef7399e1b9e9e38d1c34e6e1cfe3561002ee87953181e669a087c95756151bc5ae5eabd79c0e769ceac7e403fe37336d03268901cc21dd1dca52473282ee8bbe34f355ac82c6ab0314b00c1f96c142d6bdd43a4467b47a8253c9de2fc344775f75df41cf2a089f62bebc266cc79bac241ba0b1a3496af58ec23168dfdfb0c4f7120dee538d284d7af7a4e3c1a4d6bae7a431d469431bd73cdd04d6804d674736ecfc926ce5b30e27786d8b1a67773863"}, {0x108, 0x0, 0x0, "a7236e6078b5bfc38fed81af6fa2cd1c76366a7648760ddd1651ab7c08819dc229b5ba6f5f518be7fff2601b75c204af64dc8862792e8b0c36adf65c5af3e35159ac8defed1e0b40071101bbaa33b532c85e0a321125214248b822db6f6010f818b65fcbe5e3122831eb7c148bcef522cd13e49e1eaf5df256374c6b05ff41e1458b76099a9c1e11d659569761ab87a93aa196fe26b75bf276e5fe942fb9c795b796aaef2d6c9a7db602aa29f9b81d714b1fb66e013a5e66eb1f1bff44320e280b5fa328fc20dde708dd1c7333926ff4e10fbd1d1c83bd92304f5b6120df0815fabf042a76d31589c3340ebfd2d31dc90b"}], 0x5e0}, 0x18c) 14:45:24 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 14:45:24 executing program 4: r0 = socket(0x11, 0x3, 0x0) getpeername$unix(r0, 0x0, &(0x7f00000011c0)) 14:45:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000001180)={0x0, 0x20}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000001100), &(0x7f0000001140)=0xb) [ 814.546748][T19952] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 814.723850][T19965] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xff, 0x0, 0xff}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0xb) 14:45:25 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x8002, &(0x7f0000000280), 0x8) 14:45:25 executing program 2: 14:45:25 executing program 5: 14:45:25 executing program 3: 14:45:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0xe, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:25 executing program 4: 14:45:25 executing program 2: 14:45:25 executing program 0: [ 815.607921][T19985] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:25 executing program 5: 14:45:26 executing program 3: [ 815.818138][T19989] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:26 executing program 4: 14:45:26 executing program 2: 14:45:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0xf, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:26 executing program 5: 14:45:26 executing program 0: 14:45:26 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[{0xc}], 0xc}, 0x0) [ 816.556891][T20001] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:26 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) close(r0) 14:45:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001440)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000001300)=[{&(0x7f00000001c0)="c7", 0x1}], 0x1, &(0x7f0000001340)=[@prinfo={0x14}, @authinfo={0x10}, @sndinfo={0x1c}, @prinfo={0x14}, @sndrcv={0x2c}], 0x80}, 0x0) [ 816.733332][T20005] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000000), 0x4) 14:45:27 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) writev(r0, &(0x7f0000001740)=[{&(0x7f0000001340)="c2", 0x1}], 0x1) shutdown(r0, 0x1) 14:45:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x10, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:27 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 14:45:27 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x40, &(0x7f0000000100)) 14:45:27 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000100)="ad7583cb538663b9991e2c9a6df0d8a044b9f9b94f61a7896552d1c4153a5731e50de629dea318d2b923301c16e32025430782c6c8bad65613b31e44c6c266da621e7457b8d32f9c6077dd84e4b14c2867505d3921be4bb8363fbfb5ff9c10f171be1215288c710cbf6fb608054cdf30addab840153de4a54fe841eee00aacd87b5feb4d74ea27a378faddb38c6581a3b0a6bb11bf147bf0fea1799e6708af1820832a60cfc8989e662e3ccccdc35f5dc14200154ad8f180934717d5f02f411a4618fd21f94ee8fc1c3c35ee58b5b64d7555dc2f6a39db346386003e7f5e4771557fd6864e30424e4cf5000000", 0x53, 0x20000001, 0x0, 0xffffffffffffff85) 14:45:27 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 14:45:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x48c9c2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0, &(0x7f0000000280)) [ 817.637897][T20032] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 817.805856][T20046] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:28 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62cdc2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000200)) 14:45:28 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x2000, 0x20, &(0x7f0000000280)) 14:45:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000140)) 14:45:28 executing program 2: 14:45:28 executing program 0: 14:45:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x11, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:28 executing program 4: 14:45:28 executing program 2: 14:45:28 executing program 3: 14:45:28 executing program 5: 14:45:29 executing program 0: 14:45:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x12, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:29 executing program 2: 14:45:29 executing program 3: 14:45:29 executing program 4: 14:45:29 executing program 5: 14:45:29 executing program 0: [ 819.384738][T20076] validate_nla: 2 callbacks suppressed [ 819.384770][T20076] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 819.590034][T20083] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:29 executing program 4: 14:45:29 executing program 2: 14:45:30 executing program 3: 14:45:30 executing program 5: 14:45:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x25, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:30 executing program 0: 14:45:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x111) 14:45:30 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$char_usb(r0, 0x0, 0x0) [ 820.309055][T20095] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:30 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x282840, 0x0) 14:45:30 executing program 5: r0 = socket(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000880), 0x0, 0x2100, &(0x7f0000000940)={0x77359400}) 14:45:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = epoll_create1(0x0) dup2(r1, r0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 820.504161][T20098] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:31 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84042, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 14:45:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x2f, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:31 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 14:45:31 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x20040000, 0x0, 0x0) 14:45:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x600) 14:45:31 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)='m', 0x1}], 0x1}}], 0x1, 0x0) [ 821.181977][T20116] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 821.287749][T20122] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:31 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="02", 0x1, 0x40000, 0x0, 0x0) 14:45:31 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 14:45:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x32, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpid() sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x44, 0x13, 0x41d, 0x0, 0x0, {0x8, 0x0, 0xc002, r5}, [@IFLA_MAP={0x24}]}, 0x44}, 0x1, 0x5e}, 0x0) 14:45:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14:45:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) [ 822.006996][T20140] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) gettid() 14:45:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@getneigh={0x14, 0x1e, 0xb3e7a0221812e94b}, 0x14}}, 0x0) [ 822.251692][T20152] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 822.271448][T20151] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 822.435053][T20159] xt_l2tp: invalid flags combination: 0 14:45:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:45:32 executing program 3: [ 822.483010][T20160] xt_l2tp: invalid flags combination: 0 14:45:32 executing program 2: 14:45:32 executing program 0: 14:45:32 executing program 4: 14:45:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x3a, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:33 executing program 3: 14:45:33 executing program 2: [ 823.091178][T20173] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:33 executing program 5: 14:45:33 executing program 0: 14:45:33 executing program 4: 14:45:33 executing program 3: 14:45:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x48, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:33 executing program 0: 14:45:33 executing program 5: 14:45:33 executing program 2: 14:45:34 executing program 4: 14:45:34 executing program 0: 14:45:34 executing program 3: 14:45:34 executing program 5: 14:45:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x4c, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:34 executing program 2: 14:45:34 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 14:45:34 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = dup(r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x2, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 824.552955][T20201] validate_nla: 3 callbacks suppressed [ 824.552989][T20201] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) [ 824.664726][T20207] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) 14:45:35 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x2000200cffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x901c41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0xfe80) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x0, 0x40000000007}) 14:45:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x4e, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:35 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x14, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}]}}}}}}, 0x0) 14:45:35 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) 14:45:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 14:45:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast2}}}}) [ 825.416081][T20228] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 825.628004][T20238] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @private}, @ethernet={0x0, @remote}, @qipcrtr}) 14:45:35 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0xcec8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) socketpair(0x1d, 0x1, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) 14:45:36 executing program 2: 14:45:36 executing program 3: 14:45:36 executing program 5: 14:45:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x60, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:36 executing program 4: 14:45:36 executing program 2: 14:45:36 executing program 3: [ 826.405331][T20255] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:36 executing program 0: 14:45:36 executing program 5: [ 826.615398][T20259] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:36 executing program 4: 14:45:37 executing program 2: 14:45:37 executing program 3: 14:45:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x68, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:37 executing program 5: 14:45:37 executing program 0: 14:45:37 executing program 4: 14:45:37 executing program 3: [ 827.380396][T20271] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:37 executing program 2: [ 827.514488][T20276] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:37 executing program 0: 14:45:37 executing program 5: 14:45:38 executing program 4: 14:45:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x6c, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:38 executing program 2: 14:45:38 executing program 3: 14:45:38 executing program 5: 14:45:38 executing program 0: 14:45:38 executing program 4: [ 828.321595][T20287] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3) [ 828.434008][T20293] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 14:45:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x144) 14:45:38 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/186, 0x2c, 0xba, 0x1}, 0x20) 14:45:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x302, 0x0) write(r0, 0x0, 0x0) 14:45:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x74, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8, 0x10, 0x6}]}, 0x3c}}, 0x0) 14:45:39 executing program 4: io_setup(0xbd0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) 14:45:39 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x50, 0x13, 0xebabe8713ae35d97, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x0) 14:45:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 14:45:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)) [ 829.273450][T20318] ===================================================== [ 829.280543][T20318] BUG: KMSAN: uninit-value in __inet_diag_dump+0x58c/0x720 [ 829.288049][T20318] CPU: 0 PID: 20318 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 829.296996][T20318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.307241][T20318] Call Trace: [ 829.310557][T20318] dump_stack+0x21c/0x280 [ 829.314913][T20318] kmsan_report+0xf7/0x1e0 [ 829.319387][T20318] __msan_warning+0x58/0xa0 [ 829.324021][T20318] __inet_diag_dump+0x58c/0x720 [ 829.328997][T20318] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 829.335206][T20318] inet_diag_dump_compat+0x2a5/0x380 [ 829.340706][T20318] ? inet_diag_dump_start_compat+0x60/0x60 [ 829.346653][T20318] netlink_dump+0xb73/0x1cb0 [ 829.351353][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.356589][T20318] __netlink_dump_start+0xcf2/0xea0 [ 829.361827][T20318] inet_diag_rcv_msg_compat+0x5da/0x6c0 [ 829.367405][T20318] ? __inet_diag_dump+0x720/0x720 [ 829.372463][T20318] ? inet_diag_dump_start_compat+0x60/0x60 [ 829.378311][T20318] ? inet_diag_dump+0xc0/0xc0 [ 829.383093][T20318] ? inet_diag_unregister+0x130/0x130 [ 829.388482][T20318] sock_diag_rcv_msg+0x24f/0x620 [ 829.393449][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.398695][T20318] netlink_rcv_skb+0x6d7/0x7e0 [ 829.403816][T20318] ? sock_diag_bind+0x180/0x180 [ 829.408789][T20318] sock_diag_rcv+0x63/0x80 [ 829.413562][T20318] netlink_unicast+0x11c8/0x1490 [ 829.418525][T20318] ? diag_net_exit+0x90/0x90 [ 829.423148][T20318] netlink_sendmsg+0x173a/0x1840 [ 829.428103][T20318] ____sys_sendmsg+0xc82/0x1240 [ 829.432964][T20318] ? netlink_getsockopt+0x17e0/0x17e0 [ 829.438338][T20318] __sys_sendmsg+0x6d1/0x820 [ 829.442950][T20318] ? kmsan_copy_to_user+0x81/0x90 [ 829.447981][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.453202][T20318] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 829.459016][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.464213][T20318] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 829.470021][T20318] __se_sys_sendmsg+0x97/0xb0 [ 829.474716][T20318] __x64_sys_sendmsg+0x4a/0x70 [ 829.479482][T20318] do_syscall_64+0x9f/0x140 [ 829.483994][T20318] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.489877][T20318] RIP: 0033:0x45de89 [ 829.493764][T20318] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.513377][T20318] RSP: 002b:00007ff4612f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.521785][T20318] RAX: ffffffffffffffda RBX: 0000000000028980 RCX: 000000000045de89 [ 829.529943][T20318] RDX: 0000000000000000 RSI: 0000000020002380 RDI: 0000000000000003 [ 829.537931][T20318] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 829.545913][T20318] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 829.553890][T20318] R13: 000000000169fb6f R14: 00007ff4612f99c0 R15: 000000000118bf2c [ 829.561886][T20318] [ 829.564220][T20318] Uninit was created at: [ 829.568639][T20318] kmsan_internal_poison_shadow+0x66/0xd0 [ 829.574357][T20318] kmsan_slab_alloc+0x8a/0xe0 [ 829.579026][T20318] __kmalloc_node_track_caller+0x9aa/0x12f0 [ 829.584907][T20318] __alloc_skb+0x35f/0xb30 [ 829.589327][T20318] netlink_sendmsg+0xdb9/0x1840 [ 829.594170][T20318] ____sys_sendmsg+0xc82/0x1240 [ 829.599006][T20318] __sys_sendmsg+0x6d1/0x820 [ 829.603582][T20318] __se_sys_sendmsg+0x97/0xb0 [ 829.608248][T20318] __x64_sys_sendmsg+0x4a/0x70 [ 829.613003][T20318] do_syscall_64+0x9f/0x140 [ 829.617507][T20318] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.623393][T20318] ===================================================== [ 829.630408][T20318] Disabling lock debugging due to kernel taint [ 829.636545][T20318] Kernel panic - not syncing: panic_on_warn set ... [ 829.643124][T20318] CPU: 0 PID: 20318 Comm: syz-executor.2 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 829.654032][T20318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.664074][T20318] Call Trace: [ 829.667367][T20318] dump_stack+0x21c/0x280 [ 829.671957][T20318] panic+0x4d7/0xef7 [ 829.675857][T20318] ? add_taint+0x17c/0x210 [ 829.680272][T20318] kmsan_report+0x1df/0x1e0 [ 829.684770][T20318] __msan_warning+0x58/0xa0 [ 829.689286][T20318] __inet_diag_dump+0x58c/0x720 [ 829.694131][T20318] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 829.700286][T20318] inet_diag_dump_compat+0x2a5/0x380 [ 829.705573][T20318] ? inet_diag_dump_start_compat+0x60/0x60 [ 829.711383][T20318] netlink_dump+0xb73/0x1cb0 [ 829.715971][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.721182][T20318] __netlink_dump_start+0xcf2/0xea0 [ 829.726387][T20318] inet_diag_rcv_msg_compat+0x5da/0x6c0 [ 829.732279][T20318] ? __inet_diag_dump+0x720/0x720 [ 829.737308][T20318] ? inet_diag_dump_start_compat+0x60/0x60 [ 829.743105][T20318] ? inet_diag_dump+0xc0/0xc0 [ 829.747774][T20318] ? inet_diag_unregister+0x130/0x130 [ 829.753138][T20318] sock_diag_rcv_msg+0x24f/0x620 [ 829.758078][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.763290][T20318] netlink_rcv_skb+0x6d7/0x7e0 [ 829.768080][T20318] ? sock_diag_bind+0x180/0x180 [ 829.773029][T20318] sock_diag_rcv+0x63/0x80 [ 829.777528][T20318] netlink_unicast+0x11c8/0x1490 [ 829.782462][T20318] ? diag_net_exit+0x90/0x90 [ 829.787062][T20318] netlink_sendmsg+0x173a/0x1840 [ 829.793151][T20318] ____sys_sendmsg+0xc82/0x1240 [ 829.798001][T20318] ? netlink_getsockopt+0x17e0/0x17e0 [ 829.803369][T20318] __sys_sendmsg+0x6d1/0x820 [ 829.807966][T20318] ? kmsan_copy_to_user+0x81/0x90 [ 829.812991][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.818182][T20318] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 829.823997][T20318] ? kmsan_get_metadata+0x116/0x180 [ 829.829221][T20318] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 829.835026][T20318] __se_sys_sendmsg+0x97/0xb0 [ 829.839710][T20318] __x64_sys_sendmsg+0x4a/0x70 [ 829.844483][T20318] do_syscall_64+0x9f/0x140 [ 829.848984][T20318] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.855118][T20318] RIP: 0033:0x45de89 [ 829.859023][T20318] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.878861][T20318] RSP: 002b:00007ff4612f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.889017][T20318] RAX: ffffffffffffffda RBX: 0000000000028980 RCX: 000000000045de89 [ 829.901611][T20318] RDX: 0000000000000000 RSI: 0000000020002380 RDI: 0000000000000003 [ 829.909678][T20318] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 829.917997][T20318] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 829.927025][T20318] R13: 000000000169fb6f R14: 00007ff4612f99c0 R15: 000000000118bf2c [ 829.936850][T20318] Kernel Offset: disabled [ 829.941180][T20318] Rebooting in 86400 seconds..